{"id":"CVE-2026-121661","kind":"vulnerability","aliases":["CVE-2026-121661"],"related":[],"title":"Visual Studio Code: incomplete input filter lets local attackers bypass a security feature","description":"Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.","summary":"Visual Studio Code has an incomplete list of disallowed inputs that lets an unauthorized attacker bypass a security feature. The attack requires local access to the machine.","severity":"high","cvss":7.8,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Visual Studio Code","fixed":["1.145.3"],"affected":">= 1.0.0, < 1.145.3","ecosystem":"vendor"}],"ecosystems":[],"tags":["developers","linux","local","macos","vendor","visual-studio-code","windows"],"not_affected_if":["no-local-access-risk"],"how_to_check":"Run `code --version` or open Help > About. Versions below 1.145.3 are listed as affected. The fix is auto-updated on most installs; confirm managed or pinned installs too.","fix":"Update Visual Studio Code to 1.145.3 or later (per aggregators repeating the Microsoft CNA record; MSRC page not readable)","status":"open","published_at":"2026-11-10T19:20:29+00:00","first_seen_at":"2026-11-10T19:25:08+00:00","triaged_at":"2026-11-10T19:39:02+00:00","updated_at":"2026-11-10T21:47:08+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-11-10T19:39:02Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Visual Studio Code: incomplete input filter lets local attackers bypass a security feature","impact":"medium","summary":"Visual Studio Code has an incomplete list of disallowed inputs that lets an unauthorized attacker bypass a security feature. The attack requires local access to the machine.","audience":"developers","category":"vendor","nicknames":[],"who_cares":["visual-studio-code","developers","windows","macos","linux"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"Local attacker bypasses a security feature in the editor","analyst_note":"Find affected and fixed Visual Studio Code versions and the bypassed feature at https://nvd.nist.gov/vuln/detail/CVE-2026-121661 or the Microsoft advisory.","how_to_check":"- Check the installed Visual Studio Code version via Help > About or `code --version`\n- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-local-access-risk"],"who_is_affected":"Teams whose developers run Visual Studio Code on shared or multi-user machines are the ones most likely to be exposed, since the attacker must already have local access. The sources do not name the affected versions or the specific security feature bypassed. unknown","user_interaction":"unknown","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000706,"input_tokens":4501,"output_tokens":512,"severity_before":"high"},"analyst_status":"done","analyst_note":"Find affected and fixed Visual Studio Code versions and the bypassed feature at https://nvd.nist.gov/vuln/detail/CVE-2026-121661 or the Microsoft advisory.","search":"'-121661':16A,19A '-2026':15A,18A 'access':56B 'allow':69C 'attack':9A,47B,53B,72C 'bypass':10A,48B,74C 'code':3A,22A,31B,35B,68C 'cve':14A,17A 'develop':23B 'disallow':41B,63C 'featur':13A,51B,77C 'filter':6A 'incomplet':4A,38B,60C 'input':5A,42B,64C 'let':7A,44B 'linux':24B 'list':39B,61C 'local':8A,25B,55B,78C 'machin':59B 'maco':26B 'requir':54B 'secur':12A,50B,76C 'studio':2A,21A,30B,34B,67C 'unauthor':46B,71C 'vendor':27B 'visual':1A,20A,29B,33B,66C 'visual-studio-cod':28B 'window':32B","nicknames":[],"mitigations":[],"who_affected":"Anyone running Visual Studio Code older than 1.145.3 on Windows, macOS or Linux. Microsoft rates it local, needing user interaction, and describes it only as a bypass of an unnamed security feature via an incomplete list of disallowed inputs (CWE-184). It matters most on developer workstations and shared machines; machines already on 1.145.3 or later can skip it.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"developers","plain_action":null,"pkeys":["studiocode","visualstudiocode"],"ptokens":["code","studio","visual"],"labels":["developers","high","linux","local","macos","vendor","visualstudiocode","windows"],"campaign_type":null,"search_a":"'-121661':16A,19A '-2026':15A,18A 'attack':9A 'bypass':10A 'code':3A,22A 'cve':14A,17A 'featur':13A 'filter':6A 'incomplet':4A 'input':5A 'let':7A 'local':8A 'secur':12A 'studio':2A,21A 'visual':1A,20A","search_b":"'access':56B 'attack':47B,53B 'bypass':48B 'code':31B,35B 'develop':23B 'disallow':41B 'featur':51B 'incomplet':38B 'input':42B 'let':44B 'linux':24B 'list':39B 'local':25B,55B 'machin':59B 'maco':26B 'requir':54B 'secur':50B 'studio':30B,34B 'unauthor':46B 'vendor':27B 'visual':29B,33B 'visual-studio-cod':28B 'window':32B","search_c":"'allow':69C 'attack':72C 'bypass':74C 'code':68C 'disallow':63C 'featur':77C 'incomplet':60C 'input':64C 'list':61C 'local':78C 'secur':76C 'studio':67C 'unauthor':71C 'visual':66C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:20:29+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-121661","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-121661","severity":null,"published_at":"2026-11-10T19:20:29+00:00","modified_at":"2026-11-10T19:20:29+00:00","first_seen_at":"2026-11-10T19:25:08+00:00","fetched_at":"2026-11-10T19:25:08+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-121661:2852","url":"https://radar.offseq.com/threat/cve-2026-121661-cwe-184-incomplete-list-of-disallowed-inputs-in-microsoft-visual-studio-code-35fa9fb5fc45abb1","severity":null,"published_at":"2026-11-10T21:47:08+00:00","modified_at":"2026-11-10T21:47:08+00:00","first_seen_at":"2026-11-10T21:47:08+00:00","fetched_at":"2026-11-10T21:47:08+00:00","note":"MSRC page is JS-only and unreadable; fixed version 1.145.3 and range >=1.0.0 <1.145.3 come from aggregators (OffSeq, OPSWAT) quoting the CNA record, so nothing marked verified. The bypassed feature is not named anywhere. Sibling CVEs 121660 and 121663 show the same 1.145.3 fix.","cites":["https://radar.offseq.com/threat/cve-2026-121661-cwe-184-incomplete-list-of-disallowed-inputs-in-microsoft-visual-studio-code-35fa9fb5fc45abb1","https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-121661"]}],"documents":[{"id":119269,"url":"https://radar.offseq.com/threat/cve-2026-121661-cwe-184-incomplete-list-of-disallowed-inputs-in-microsoft-visual-studio-code-35fa9fb5fc45abb1","title":"OffSeq: CVE-2026-121661 Visual Studio Code","kind":"other","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"mentions","confidence":null,"note":null},{"id":119270,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-121661","title":"MSRC: CVE-2026-121661 (page needs JavaScript; content not readable)","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}