Vulnerability · Published Nov 11, 2025 · Assigned by microsoft
CVE-2025-62222Agentic AI and Visual Studio Code Remote Code Execution Vulnerability
High 8.8
In plain English
A high-severity command injection in Microsoft Visual Studio Code CoPilot Chat Extension from Microsoft. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 57% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)0.8%top 43.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack tooling1Public PoC
Official description
Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to execute code over a network.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Microsoft Visual Studio Code CoPilot Chat Extension | 0.27.0 – before 0.32.5 |
Weakness: CWE-77, CWE-20 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
References
- Agentic AI and Visual Studio Code Remote Code Execution Vulnerability vendor-advisory, patch