cve 2026 41613

CVE-2026-41613 is an Important-rated elevation-of-privilege vulnerability in Visual Studio Code, fixed in version 1.119.1. Microsoft attributed the issue to session fixation and command-injection weaknesses that could be exploited over a network after user interaction. The vulnerability is particularly concerning for developer workstations, which often hold cloud identities, source code, secrets, and internal automation. While the bug itself is not unusual, its impact on privileged development environments makes it a significant security concern. Users are advised to update VS Code to version 1.119.1 or later to mitigate the risk.