CVE-2026-69278

Summary

Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

Affected Software

VendorProductVersion RangeStatus
MicrosoftVisual Studio Code1.0.0 < 1.132.1affected

Weaknesses

  • CWE-863: CWE-863: Incorrect Authorization
  • CWE-693: CWE-693: Protection Mechanism Failure

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References