PT-2025-32853 · Microsoft+1 · Visual Studio+1

Johann Rehberger + 3 · CVE-2025-53773 · Published 2025-08-12 · Updated 2026-07-20

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions GitHub Copilot (affected versions not specified) Visual Studio 2022 versions prior to 17.14.12

Description Improper neutralization of special elements used in a command leads to a command injection issue in GitHub Copilot and Visual Studio, allowing an unauthorized attacker to execute code locally. This can be achieved through prompt injection, where an attacker hides malicious instructions within a repository comment, README, or PR description. The AI assistant may be tricked into modifying the .vscode/settings.json file to enable an auto-approve mode, which allows the agent to execute arbitrary bash commands in the terminal without human confirmation.

Recommendations Update Visual Studio 2022 to version 17.14.12. At the moment, there is no information about a newer version that contains a fix for this vulnerability for GitHub Copilot.

Exploit

Fix

LPE

RCE

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

BDU:2025-10171

CVE-2025-53773

Affected Products

Github Copilot

Visual Studio

References · 63

• 🔥 https://embracethered.com/blog/posts/2025/github-copilot-remote-code-execution-via-prompt-injection · Exploit
• 🔥 https://github.com/B1ack4sh/Blackash-CVE-2025-53773 · Exploit
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53773 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-53773 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-10171 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-53773 · Security Note
• https://reddit.com/r/CVEWatch/comments/1mrqwf1/top_10_trending_cves_16082025 · Reddit Post
• https://reddit.com/r/CVEWatch/comments/1mpwdks/top_10_trending_cves_14082025 · Reddit Post
• https://twitter.com/musiol_martin/status/2052114425788739747 · Twitter Post
• https://twitter.com/DigitalGriffter/status/1988677304479015182 · Twitter Post
• https://twitter.com/canartuc/status/2032802979540291872 · Twitter Post
• https://twitter.com/Persistent_Psi/status/1955571995829272850 · Twitter Post
• https://t.me/thebugbountyhunter/10067 · Telegram Post
• https://twitter.com/DFIR_Radar/status/2079175328979976356 · Twitter Post
• https://twitter.com/hasamba/status/2032774591316144458 · Twitter Post