CVE-2022-30129

HIGH

Visual Studio Code < 1.67.1 - Remote Code Execution via Argument Injection

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2022-30129. PoCs published by RoccoPearce.

AI-analyzed exploit summary The repository contains only a placeholder Python file with a comment referencing CVE-2022-30129 and a link to a PDF. No functional exploit code is present.

Description

Visual Studio Code Remote Code Execution Vulnerability

Exploits (1)

nomisec STUB 2 stars
by RoccoPearce · poc
https://github.com/RoccoPearce/CVE-2022-30129

The repository contains only a placeholder Python file with a comment referencing CVE-2022-30129 and a link to a PDF. No functional exploit code is present.

Classification
Stub 90%
Attack Type
Other
Complexity
Trivial
Reliability
Theoretical
Target: Unknown (CVE-2022-30129 is unrelated to this stub)
No auth needed
Prerequisites: None (no functional code)
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3

Scores

CVSS v3 8.8
EPSS 0.4172
EPSS Percentile 98.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

Status published
Products (1)
microsoft/visual_studio_code < 1.67.1
Published May 10, 2022
Tracked Since Feb 18, 2026