Microsoft disclosed CVE-2026-41613 on May 12, 2026, as an Important-rated Visual Studio Code elevation-of-privilege vulnerability fixed in VS Code 1.119.1, with Microsoft attributing the issue to session fixation and command-injection weaknesses that could be abused over a network after user...