{"id":"CVE-2026-120779","kind":"vulnerability","aliases":["CVE-2026-120779"],"related":[],"title":"Visual Studio Code: code injection lets an unauthorized attacker run code remotely","description":"Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.","summary":"A code injection flaw in Visual Studio Code lets an unauthorized attacker execute code over the network. The NVD entry rates it critical at CVSS 9.6.","severity":"critical","cvss":9.6,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["desktop","developer-tooling","other","visual-studio-code"],"not_affected_if":[],"how_to_check":"In VS Code: Help > About (or run 'code --version'); versions below 1.145.3 are reportedly affected per OffSeq (third-party, not confirmed by Microsoft). Confirm against the MSRC entry for CVE-2026-120779.","fix":"Reportedly update VS Code to 1.145.3 (per OffSeq; Microsoft's own page not read, so unconfirmed).","status":"open","published_at":"2026-11-10T19:20:27+00:00","first_seen_at":"2026-11-10T19:25:07+00:00","triaged_at":"2026-11-10T19:25:45+00:00","updated_at":"2026-11-10T19:32:29+00:00","category":"other","confidence":0.4,"triage":{"at":"2026-11-10T19:25:45Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Visual Studio Code: code injection lets an unauthorized attacker run code remotely","impact":"high","summary":"A code injection flaw in Visual Studio Code lets an unauthorized attacker execute code over the network. The NVD entry rates it critical at CVSS 9.6.","audience":"developers","category":"other","nicknames":[],"who_cares":["visual-studio-code","developer-tooling"],"confidence":0.5,"fix_status":"unknown","needs_auth":"unknown","worst_case":"attacker executes arbitrary code over the network","analyst_note":"Find the vendor advisory for CVE-2026-120779 to confirm affected versions, fixed versions, and whether user interaction or extension setup is needed.","how_to_check":"- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"The sources do not say which Visual Studio Code versions are affected or what configuration is required. Teams that run Visual Studio Code, including on shared or remote development machines, should look for vendor guidance.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.000658,"input_tokens":4496,"output_tokens":417,"severity_before":"critical"},"analyst_status":"done","analyst_note":"Find the vendor advisory for CVE-2026-120779 to confirm affected versions, fixed versions, and whether user interaction or extension setup is needed.","search":"'-120779':15A,18A '-2026':14A,17A '9.6':53B 'allow':66C 'attack':9A,39B,69C 'code':3A,4A,11A,27B,29B,35B,41B,59C,60C,65C,72C 'control':55C 'critic':50B 'cve':13A,16A 'cvss':52B 'desktop':19B 'develop':21B 'developer-tool':20B 'entri':47B 'execut':40B,71C 'flaw':31B 'generat':57C 'improp':54C 'inject':5A,30B,61C 'let':6A,36B 'network':44B,75C 'nvd':46B 'rate':48B 'remot':12A 'run':10A 'studio':2A,26B,34B,64C 'tool':22B 'unauthor':8A,38B,68C 'visual':1A,25B,33B,63C 'visual-studio-cod':24B","nicknames":[],"mitigations":[],"who_affected":"Anyone running Visual Studio Code is possibly exposed. The CVSS vector (from Microsoft) is network, no privileges, user interaction required, scope changed, so an attacker likely needs a user to open or click something crafted. Which component, setting or extension is involved is not stated in any source read; a third-party tracker says versions before 1.145.3 are affected.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"developers","plain_action":null,"pkeys":[],"ptokens":[],"labels":["critical","desktop","developertooling","other","visualstudiocode"],"campaign_type":null,"search_a":"'-120779':15A,18A '-2026':14A,17A 'attack':9A 'code':3A,4A,11A 'cve':13A,16A 'inject':5A 'let':6A 'remot':12A 'run':10A 'studio':2A 'unauthor':8A 'visual':1A","search_b":"'9.6':53B 'attack':39B 'code':27B,29B,35B,41B 'critic':50B 'cvss':52B 'desktop':19B 'develop':21B 'developer-tool':20B 'entri':47B 'execut':40B 'flaw':31B 'inject':30B 'let':36B 'network':44B 'nvd':46B 'rate':48B 'studio':26B,34B 'tool':22B 'unauthor':38B 'visual':25B,33B 'visual-studio-cod':24B","search_c":"'allow':66C 'attack':69C 'code':59C,60C,65C,72C 'control':55C 'execut':71C 'generat':57C 'improp':54C 'inject':61C 'network':75C 'studio':64C 'unauthor':68C 'visual':63C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:20:27+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-120779","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-120779","severity":null,"published_at":"2026-11-10T19:20:27+00:00","modified_at":"2026-11-10T19:20:27+00:00","first_seen_at":"2026-11-10T19:25:07+00:00","fetched_at":"2026-11-10T19:25:07+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-120779:2516","url":"https://radar.offseq.com/threat/cve-2026-120779-cwe-94-code-injection-in-microsoft-visual-studio-code-623f9485607e5caf","severity":null,"published_at":"2026-11-10T19:32:29+00:00","modified_at":"2026-11-10T19:32:29+00:00","first_seen_at":"2026-11-10T19:32:29+00:00","fetched_at":"2026-11-10T19:32:29+00:00","note":"No Microsoft/MSRC or GHSA page found for this CVE (MSRC page not readable; microsoft/vscode GHSA list of Nov 10 has no CVE mapping). Only a third-party rewrite (OffSeq) says affected >=1.0.0 <1.145.3, fixed 1.145.3; nothing verified.","cites":["https://radar.offseq.com/threat/cve-2026-120779-cwe-94-code-injection-in-microsoft-visual-studio-code-623f9485607e5caf"]}],"documents":[{"id":117574,"url":"https://radar.offseq.com/threat/cve-2026-120779-cwe-94-code-injection-in-microsoft-visual-studio-code-623f9485607e5caf","title":"OffSeq Threat Radar: CVE-2026-120779","kind":"blog","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"describes","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}