cve 2026 69306

CVE-2026-69306 is a security feature bypass in Microsoft Visual Studio Code that could let the editor's AI-agent network controls be evaded through a specially formatted IPv6 address. The flaw affects deployments that had enabled the agent network filter, which is intended to limit where built-in agent tools such as Fetch Page and the Integrated Browser can connect. Microsoft fixed the issue in VS Code version 1.132.1 or later, with the security advisory published August 11. Users running version 1.132.0 or earlier are affected and should update to mitigate the risk. This tag covers the advisory, affected versions, and the recommended update action.