CVE-2025-53773highPrompt injection2025-08-12
CVE-2025-53773: GitHub Copilot prompt injection to code execution
Command injection in GitHub Copilot and Visual Studio let an attacker run code on a developer’s machine. Embrace The Red showed it starting from a prompt injection in project content.
What it is
NVD: “Improper neutralization of special elements used in a command (‘command injection’) in GitHub Copilot and Visual Studio allows an unauthorized attacker to execute code locally.”
Embrace The Red’s write-up, published the same day as the fix, describes a prompt injection that leads to full compromise of the developer’s machine.
How to check
- Check that VS Code, Visual Studio and the Copilot extensions are on versions released after August 2025.
How to fix
- Install the August 2025 updates.
- Review agent edits to workspace settings files before accepting them.
Sources
More advisories for this tool