HIGHVulnerability

CVE-2026-70335

Improper neutralization of special elements used in an os command ('os command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to elevate privileges locally.

Properties

severity
HIGH
score
7.8
cve_id
CVE-2026-70335
vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
published_at
2026-08-11T17:19:11.153
last_modified
2026-09-02T18:21:20.050

Related Entities (3)

HAS_WEAKNESS (1)

[Weakness]Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

DESCRIBED_BY (1)

[Source]NVD

AFFECTS_PRODUCT (1)

[Product]

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-70335 — Ninja Signal Threat Intelligence | Ninja Signal