PT-2025-46517 · Github+1 · Github Copilot+1

Published 2025-11-11 · Updated 2025-11-14 · CVE-2025-62453

Positive Technologies (AI Summary)

CVSS v3.1

5.0

Medium

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions GitHub Copilot and Visual Studio Code (affected versions not specified)

Description A security feature bypass can occur due to improper validation of generative AI output in GitHub Copilot and Visual Studio Code. An authorized attacker can exploit this locally.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Protection Mechanism Failure

Weakness Enumeration

CWE-693

CWE-1426

Related Identifiers

BDU:2025-14176

CVE-2025-62453

Affected Products

Github Copilot

Visual Studio Code

References · 8

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62453 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-14176 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-62453 · Security Note
• https://osv.dev/vulnerability/CVE-2025-62453 · Vendor Advisory
• https://twitter.com/0dayPublishing/status/1988727202163114304 · Twitter Post
• https://t.me/cveNotify/142809 · Telegram Post
• https://t.me/CVEtracker/37068 · Telegram Post
• https://twitter.com/CVEnew/status/1988348986541932556 · Twitter Post