MEDIUMVulnerability

CVE-2026-81380

Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network.

Properties

severity
MEDIUM
score
5.3
cve_id
CVE-2026-81380
signal_observed_at
2026-09-23T22:45:03+00:00
vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
published_at
2026-09-08T18:20:54.330
last_modified
2026-09-23T19:51:23.410

Related Entities (3)

HAS_WEAKNESS (1)

[Weakness]Improper Neutralization of Special Elements used in a Command ('Command Injection')

DESCRIBED_BY (1)

[Source]NVD

AFFECTS_PRODUCT (1)

[Product]

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-81380 — Ninja Signal Threat Intelligence | Ninja Signal