CVE-2026-12856 | Red Hat OpenShift Dev Spaces vscode-java Extension argument injection (GHSA-7qv8-6qrw-3crv)

A vulnerability marked as critical has been reported in Red Hat OpenShift Dev Spaces. The impacted element is an unknown function of the component vscode-java Extension. This manipulation causes argument injection.

This vulnerability appears as CVE-2026-12856. The attack may be initiated remotely. There is no available exploit.