cve 2026-23653

CVE-2026-23653 is an information disclosure vulnerability affecting GitHub Copilot and Visual Studio Code, as assigned by Microsoft. This classification indicates that sensitive data such as source code, tokens, or workspace contents could be exposed if the flaw is exploited. While public technical details remain limited, the severity of information disclosure in developer tooling is significant, as it can compromise intellectual property and credentials. Discussions on WindowsForum highlight the implications for AI-assisted development security, emphasizing that this is not a minor bug but a serious vulnerability requiring attention from developers and IT teams using these tools.