{"id":"CVE-2026-83953","kind":"vulnerability","aliases":["CVE-2026-83953"],"related":[],"title":"GitHub Copilot plugin for JetBrains IDEs: command injection lets a local user read information","description":"Improper neutralization of special elements used in a command ('command injection') in Github Copilot allows an authorized attacker to disclose information locally.","summary":"Microsoft (CNA) says command injection in the GitHub Copilot Plugin for JetBrains IDEs lets an authorized local attacker disclose information. CVSS 5.5 medium (local, low privileges, no user interaction, confidentiality only). No exploitation or public PoC found.","severity":"medium","cvss":5.5,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"GitHub Copilot Plugin for JetBrains IDEs","fixed":[],"affected":">= 1.0.0, <= 1.17.0-251 (CNA range, boundary unclear)","ecosystem":"jetbrains"}],"ecosystems":[],"tags":["ai-tooling","github-copilot","jetbrains","vscode"],"not_affected_if":["no-local-untrusted-users","single-user-machine"],"how_to_check":"In your JetBrains IDE open Settings > Plugins > Installed > GitHub Copilot and read the version. The CNA lists 1.0.0 through 1.17.0-251 as affected; whether 1.17.0-251 itself is the fix is not stated. Check the MSRC page for the fixed build.","fix":null,"status":"open","published_at":"2026-11-10T19:21:24+00:00","first_seen_at":"2026-11-10T19:25:17+00:00","triaged_at":"2026-11-10T20:00:34+00:00","updated_at":"2026-11-10T20:02:35+00:00","category":"ai-tooling","confidence":0.6,"triage":{"at":"2026-11-10T20:00:34Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"GitHub Copilot: command injection lets a local user disclose information","impact":"low","summary":"GitHub Copilot has a command injection flaw in which special characters are not neutralized before being passed to a command. An authorized attacker on the same machine can use it to read information they should not see.","audience":"developers","category":"ai-tooling","nicknames":[],"who_cares":["github-copilot","vscode"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"local attacker reads information from the Copilot host","analyst_note":"Confirm affected Copilot product and versions and whether a fixed release exists at the NVD entry.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-local-untrusted-users"],"who_is_affected":"Developers who run GitHub Copilot locally and share that machine with other users. The sources do not name affected versions or the exact feature path, so the team should confirm the Copilot version they run.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000648,"input_tokens":4493,"output_tokens":398,"severity_before":"medium"},"analyst_status":"done","analyst_note":"Confirm affected Copilot product and versions and whether a fixed release exists at the NVD entry.","search":"'-2026':16A,19A '-83953':17A,20A '5.5':56B 'ai':28B 'ai-tool':27B 'allow':86C 'attack':52B,89C 'author':50B,88C 'cna':36B 'command':7A,38B,80C,81C 'confidenti':64B 'copilot':2A,22A,32B,43B,85C 'cve':15A,18A 'cvss':55B 'disclos':53B,91C 'element':76C 'exploit':67B 'for':24A 'found':71B 'github':1A,21A,31B,42B,84C 'github-copilot':30B 'ide':6A,47B 'ides':26A 'improp':72C 'inform':14A,54B,92C 'inject':8A,39B,82C 'interact':63B 'jetbrain':5A,33B,46B 'jetbrains':25A 'let':9A,48B 'local':11A,51B,58B,93C 'low':59B 'medium':57B 'microsoft':35B 'neutral':73C 'plugin':3A,23A,44B 'poc':70B 'privileg':60B 'public':69B 'read':13A 'say':37B 'special':75C 'tool':29B 'use':77C 'user':12A,62B 'vscode':34B","nicknames":[],"mitigations":[],"who_affected":"Developers who run GitHub Copilot locally and share that machine with other users. The sources do not name affected versions or the exact feature path, so the team should confirm the Copilot version they run.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"developers","plain_action":null,"pkeys":["copilotpluginforjetbrainsides","githubcopilotpluginforjetbrainsides"],"ptokens":["copilot","for","github","ides","jetbrains","plugin"],"labels":["aitooling","githubcopilot","jetbrains","medium","vscode"],"campaign_type":null,"search_a":"'-2026':16A,19A '-83953':17A,20A 'command':7A 'copilot':2A,22A 'cve':15A,18A 'for':24A 'github':1A,21A 'ide':6A 'ides':26A 'inform':14A 'inject':8A 'jetbrain':5A 'jetbrains':25A 'let':9A 'local':11A 'plugin':3A,23A 'read':13A 'user':12A","search_b":"'5.5':56B 'ai':28B 'ai-tool':27B 'attack':52B 'author':50B 'cna':36B 'command':38B 'confidenti':64B 'copilot':32B,43B 'cvss':55B 'disclos':53B 'exploit':67B 'found':71B 'github':31B,42B 'github-copilot':30B 'ide':47B 'inform':54B 'inject':39B 'interact':63B 'jetbrain':33B,46B 'let':48B 'local':51B,58B 'low':59B 'medium':57B 'microsoft':35B 'plugin':44B 'poc':70B 'privileg':60B 'public':69B 'say':37B 'tool':29B 'user':62B 'vscode':34B","search_c":"'allow':86C 'attack':89C 'author':88C 'command':80C,81C 'copilot':85C 'disclos':91C 'element':76C 'github':84C 'improp':72C 'inform':92C 'inject':82C 'local':93C 'neutral':73C 'special':75C 'use':77C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:21:24+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-83953","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-83953","severity":null,"published_at":"2026-11-10T19:21:24+00:00","modified_at":"2026-11-10T19:21:24+00:00","first_seen_at":"2026-11-10T19:25:17+00:00","fetched_at":"2026-11-10T19:25:17+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-83953:2593","url":"https://cve.report/CVE-2026-83953","severity":null,"published_at":"2026-11-10T20:02:35+00:00","modified_at":"2026-11-10T20:02:35+00:00","first_seen_at":"2026-11-10T20:02:35+00:00","fetched_at":"2026-11-10T20:02:35+00:00","note":"Only secondary mirror of Microsoft CNA data was readable; NVD and MSRC pages returned empty. Plugin affected range from CNA via cve.report. Fix version unconfirmed, nothing verified. Revisit when MSRC page is readable.","cites":["https://cve.report/CVE-2026-83953"]}],"documents":[{"id":117745,"url":"https://cve.report/CVE-2026-83953","title":"CVE-2026-83953 (CVE record mirror, Microsoft CNA data)","kind":"other","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"describes","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}