Visual Studio Code Security Feature Bypass VulnerabilityVendor advisorypatch
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69306 CVE-2026-69306
HIGH
Visual Studio Code Security Feature Bypass Vulnerability
Record summary
CVE-2026-69306 has a selected CVSS score of 8.2 (high).
Description
Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
Description source: GitHub Advisory
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Aug 11, 2026 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Visual Studio CodeBrowse Microsoft / Visual Studio Code | CVE List | 1.0.0 to < 1.132.1 | affected |
References
2nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2026-69306