PT-2026-8355 · Unknown · Markdown Preview Enhanced

Published 2026-02-16 · Updated 2026-02-25 · CVE-2025-65716

Positive Technologies · (AI Summary)

CVSS v2.0

10

High

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Visual Studio Code Extensions Markdown Preview Enhanced version 0.8.18

Description A flaw exists in Visual Studio Code Extensions Markdown Preview Enhanced version 0.8.18 that could allow attackers to execute arbitrary code. This is achieved by uploading a specially crafted .Md file. The vulnerable component is the file processing functionality within the extension. The uploadFile() function is likely involved in the processing of the malicious file. The vulnerable parameter is the uploaded .Md file itself.

Recommendations Update Visual Studio Code Extensions Markdown Preview Enhanced to a version that addresses this issue. As a temporary workaround, avoid opening or processing untrusted .Md files with this extension.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

BDU:2026-02193

CVE-2025-65716

Affected Products

Markdown Preview Enhanced

References · 16

• 🔥 https://ox.security/blog/cve-2025-65716-markdown-preview-enhanced-vscode-vulnerability · Exploit
• https://bdu.fstec.ru/vul/2026-02193 · Security Note
• https://osv.dev/vulnerability/CVE-2025-65716 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-65716 · Security Note
• https://github.com/shd101wyy/markdown-preview-enhanced · Note
• https://twitter.com/MosheTov/status/2023886646899601743 · Twitter Post
• https://twitter.com/autumn_good_35/status/2024171367017693603 · Twitter Post
• https://twitter.com/grok/status/2024453632024879596 · Twitter Post
• https://twitter.com/ThreatSynop/status/2024379944663732699 · Twitter Post
• https://t.me/true_secator/7930 · Telegram Post
• https://twitter.com/SecAlertsCo/status/2023922736993890597 · Twitter Post
• https://t.me/cveNotify/153213 · Telegram Post
• https://twitter.com/cracbot/status/2025163659761406357 · Twitter Post
• https://twitter.com/jbhall56/status/2024117407837479120 · Twitter Post
• https://twitter.com/MosheTov/status/2023764123574555055 · Twitter Post