{"id":"CVE-2026-121660","kind":"vulnerability","aliases":["CVE-2026-121660"],"related":[],"title":"Visual Studio Code: incomplete input filter lets attackers bypass a security feature","description":"Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.","summary":"Microsoft lists an incomplete list of disallowed inputs (CWE-184) in Visual Studio Code that lets an unauthorized attacker bypass a security feature over a network. Microsoft rates it CVSS 7.5, high complexity, and user interaction is required. Versions before 1.145.3 are listed as affected. The advisory text we could read does not say which security feature is bypassed. No exploitation is known.","severity":"high","cvss":7.5,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Visual Studio Code","fixed":["1.145.3"],"affected":"< 1.145.3","ecosystem":"vendor"}],"ecosystems":[],"tags":["developers","linux","macos","vendor","vscode","windows"],"not_affected_if":[],"how_to_check":"Run `code --version`. Versions below 1.145.3 are listed as affected. Update via Help > Check for Updates, or reinstall from code.visualstudio.com.","fix":"Update Visual Studio Code to 1.145.3 or later (per the Microsoft CNA record; confirm on the MSRC page).","status":"open","published_at":"2026-11-10T19:20:29+00:00","first_seen_at":"2026-11-10T19:25:08+00:00","triaged_at":"2026-11-10T19:44:21+00:00","updated_at":"2026-11-10T21:46:53+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-11-10T19:44:21Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Visual Studio Code: incomplete input filter lets attackers bypass a security feature","impact":"medium","summary":"Visual Studio Code's list of disallowed inputs is incomplete, so an unauthorized attacker can get past a security feature. The sources say it can be reached over a network, but they do not describe the exact bypass or its impact beyond that.","audience":"developers","category":"vendor","nicknames":[],"who_cares":["vscode","developers","windows","macos","linux"],"confidence":0.4,"fix_status":"unknown","needs_auth":"unknown","worst_case":"attacker bypasses a security feature in the editor","analyst_note":"Find the vendor advisory for CVE-2026-121660 to confirm affected versions, fixed release and which security feature is bypassed.","how_to_check":"- Check the installed version with `code --version` and compare it with the fixed release named by the vendor.\n- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Teams that run Visual Studio Code on developer machines or in shared environments reached over a network. The sources do not say which VS Code versions are affected or which security feature is bypassed.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000681,"input_tokens":4502,"output_tokens":461,"severity_before":"high"},"analyst_status":"done","analyst_note":"Find the vendor advisory for CVE-2026-121660 to confirm affected versions, fixed release and which security feature is bypassed.","search":"'-121660':15A,18A '-184':37B '-2026':14A,17A '1.145.3':68B '7.5':58B 'advisori':74B 'affect':72B 'allow':100C 'attack':8A,46B,103C 'bypass':9A,47B,86B,105C 'code':3A,21A,41B,99C 'complex':60B 'could':77B 'cve':13A,16A 'cvss':57B 'cwe':36B 'develop':22B 'disallow':34B,94C 'exploit':88B 'featur':12A,50B,84B,108C 'filter':6A 'high':59B 'incomplet':4A,31B,91C 'input':5A,35B,95C 'interact':63B 'known':90B 'let':7A,43B 'linux':23B 'list':29B,32B,70B,92C 'maco':24B 'microsoft':28B,54B 'network':53B,111C 'rate':55B 'read':78B 'requir':65B 'say':81B 'secur':11A,49B,83B,107C 'studio':2A,20A,40B,98C 'text':75B 'unauthor':45B,102C 'user':62B 'vendor':25B 'version':66B 'visual':1A,19A,39B,97C 'vscode':26B 'window':27B","nicknames":[],"mitigations":[],"who_affected":"Anyone running Visual Studio Code earlier than 1.145.3 on Windows, macOS or Linux. The attack needs a user to take some action, such as opening something the attacker controls. The bypassed feature is not named in the sources we could read. Teams already on 1.145.3 or later can skip it.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"developers","plain_action":null,"pkeys":["studiocode","visualstudiocode"],"ptokens":["code","studio","visual"],"labels":["developers","high","linux","macos","vendor","vscode","windows"],"campaign_type":null,"search_a":"'-121660':15A,18A '-2026':14A,17A 'attack':8A 'bypass':9A 'code':3A,21A 'cve':13A,16A 'featur':12A 'filter':6A 'incomplet':4A 'input':5A 'let':7A 'secur':11A 'studio':2A,20A 'visual':1A,19A","search_b":"'-184':37B '1.145.3':68B '7.5':58B 'advisori':74B 'affect':72B 'attack':46B 'bypass':47B,86B 'code':41B 'complex':60B 'could':77B 'cvss':57B 'cwe':36B 'develop':22B 'disallow':34B 'exploit':88B 'featur':50B,84B 'high':59B 'incomplet':31B 'input':35B 'interact':63B 'known':90B 'let':43B 'linux':23B 'list':29B,32B,70B 'maco':24B 'microsoft':28B,54B 'network':53B 'rate':55B 'read':78B 'requir':65B 'say':81B 'secur':49B,83B 'studio':40B 'text':75B 'unauthor':45B 'user':62B 'vendor':25B 'version':66B 'visual':39B 'vscode':26B 'window':27B","search_c":"'allow':100C 'attack':103C 'bypass':105C 'code':99C 'disallow':94C 'featur':108C 'incomplet':91C 'input':95C 'list':92C 'network':111C 'secur':107C 'studio':98C 'unauthor':102C 'visual':97C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:20:29+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-121660","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-121660","severity":null,"published_at":"2026-11-10T19:20:29+00:00","modified_at":"2026-11-10T19:20:29+00:00","first_seen_at":"2026-11-10T19:25:08+00:00","fetched_at":"2026-11-10T19:25:08+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-121660:2853","url":"https://app.opencve.io/cve/CVE-2026-121660","severity":null,"published_at":"2026-11-10T21:46:53+00:00","modified_at":"2026-11-10T21:46:53+00:00","first_seen_at":"2026-11-10T21:46:53+00:00","fetched_at":"2026-11-10T21:46:53+00:00","note":"MSRC page is JS-only and unreadable; versions come from the Microsoft CNA record as mirrored by OpenCVE/OffSeq (affected < 1.145.3). Not verified. Bypassed feature not stated anywhere. CWE-184, CVSS 7.5 AV:N/AC:H/UI:R, so user interaction is required (triage said unauthenticated only).","cites":["https://app.opencve.io/cve/CVE-2026-121660","https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-121660"]}],"documents":[{"id":119264,"url":"https://app.opencve.io/cve/CVE-2026-121660","title":"OpenCVE CVE-2026-121660 (mirrors Microsoft CNA record)","kind":"other","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"describes","confidence":null,"note":null},{"id":119265,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-121660","title":"MSRC: Visual Studio Code Security Feature Bypass Vulnerability (page is JS-only, text not readable)","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}