cve-2026-70335

Microsoft has published CVE-2026-70335, “GitHub Copilot and Visual Studio Code Elevation of Privilege Vulnerability,” an Important flaw that can let malicious content steer an AI agent into running commands on a developer’s machine without a confirmation prompt. The fix is available in Visual...