A vulnerability was found in Microsoft GitHub Copilot and Visual Studio Code up to 1.132.0. It has been rated as problematic. The impacted element is an unknown function. Performing a manipulation results in os command injection.

This vulnerability is reported as CVE-2026-70335. The attack requires a local approach. No exploit exists.

Upgrading the affected component is advised.