Microsoft has assigned CVE‑2025‑62449 to a path‑traversal / security‑feature bypass in the Visual Studio Code GitHub Copilot Chat extension — a locally exploitable weakness rated CVSS 3.1 = 6.8 (Medium) that Microsoft published on November 11, 2025 and which the vendor marked as addressed in the...