CVE-2026-81380 – GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability

CVE-2026-81380 is an information disclosure vulnerability involving improper neutralization of special command elements in GitHub Copilot and Visual Studio Code. An unauthorized attacker could potentially cause GitHub Copilot agent mode to send sensitive information from a user’s development environment to an attacker-controlled service. Exploitation requires no privileges but does require user interaction and has high attack complexity.

CVSS SCORE: 5.3.

SEVERITY: Critical.

THREAT: The primary threat is unauthorized disclosure of sensitive development information. Successful exploitation could expose workspace data and environment variables over a network, potentially revealing information that organizations expect to remain within their development environments.

EXPLOITS: The exploit code maturity is classified as Unproven. The vulnerability is not publicly disclosed and is not reported as exploited. No public exploit, zero-day exploitation, or proof-of-concept exploit code is confirmed.

TECHNICAL SUMMARY: The vulnerability is caused by improper neutralization of special elements used in a command (CWE-77, Command Injection). An attacker could potentially manipulate GitHub Copilot agent mode into transmitting sensitive information from the user’s development environment to an attacker-controlled service. The attack vector is network-based, requires no privileges, and requires user interaction. Attack complexity is high, meaning successful exploitation depends on factors such as the environment, system configuration, and security measures. A successful attack has a high confidentiality impact, while the recorded integrity and availability impacts are none.

EXPLOITABILITY: Visual Studio Code is confirmed as affected, with GitHub Copilot also identified in the vulnerability title and description. Specific affected versions or builds cannot be confirmed from the source information. Exploitation requires network access, no privileges, user interaction, and a high-complexity attack.

BUSINESS IMPACT: Successful exploitation could result in sensitive workspace data or environment variables leaving a development environment and reaching an attacker-controlled service. For organizations, disclosure of development information can create confidentiality risks and potentially expose sensitive operational or project data. “Development secrets can become business risks when sensitive workspace information escapes its trusted environment.”

WORKAROUND: No workaround or mitigation is identified. An official fix is listed as the remediation.

URGENCY: This vulnerability carries a Critical severity rating and could expose sensitive development-environment information. Although exploitation is not reported and exploit maturity is Unproven, organizations using affected software should prioritize the official fix to reduce the risk of confidential workspace data or environment variables being disclosed.