CVE-2025-55319
published 2025-09-12CVE-2025-55319: Ai command injection in Agentic AI and Visual Studio Code allows an unauthorized attacker to execute code over a network.
critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
Ai command injection in Agentic AI and Visual Studio Code allows an unauthorized attacker to execute code over a network.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | visual_studio_code | < 1.104.0 | 1.104.0 |
| microsoft | visual_studio_code | >= 1.0.0 < 1.104.0 | 1.104.0 |
| msrc | visual_studio_code | — | — |