IDEs & agents · GitHub / Microsoft
Copilot
GitHub Copilot (completion, chat, coding agent) and Microsoft 365 Copilot.
6Advisories
2critical
4high
0medium
2025-10-08Latest
Timeline · advisories per quarter
22025 Q1
22025 Q2
12025 Q3
12025 Q4
Named in sources
Reported for Copilot
01. CamoLeak: Copilot Chat leaked private source codeLegit Security reported a critical vulnerability in GitHub Copilot Chat that could leak private source code from a user’s repositories. Copilot 2025-10-08 02. CVE-2025-32711 (EchoLeak): zero-click data leak in Microsoft 365 CopilotAI command injection in Microsoft 365 Copilot let an unauthorised attacker disclose information over a network. Microsoft fixed it server-side. Copilot 2025-06-11 03. CVE-2025-53773: GitHub Copilot prompt injection to code executionCommand injection in GitHub Copilot and Visual Studio let an attacker run code on a developer’s machine. Embrace The Red showed it starting from a prompt injection in project content. Copilot 2025-08-12 04. “Rules File Backdoor”: hidden Unicode instructions in AI rules filesPillar Security showed invisible Unicode characters in shared rules files (.cursorrules, .mdc) can steer Cursor and GitHub Copilot into writing backdoored code. 
Cursor Copilot 2025-03 05. Slopsquatting: AI suggests packages that don’t existA USENIX Security 2025 study found 19.7% of 2.23 million package suggestions from 16 code models were hallucinated. Attackers can register those names. 
Claude Code Copilot Cursor +5 more 2025
Copilot 2025-10-08 02. CVE-2025-32711 (EchoLeak): zero-click data leak in Microsoft 365 CopilotAI command injection in Microsoft 365 Copilot let an unauthorised attacker disclose information over a network. Microsoft fixed it server-side. Copilot 2025-06-11 03. CVE-2025-53773: GitHub Copilot prompt injection to code executionCommand injection in GitHub Copilot and Visual Studio let an attacker run code on a developer’s machine. Embrace The Red showed it starting from a prompt injection in project content. Copilot 2025-08-12 04. “Rules File Backdoor”: hidden Unicode instructions in AI rules filesPillar Security showed invisible Unicode characters in shared rules files (.cursorrules, .mdc) can steer Cursor and GitHub Copilot into writing backdoored code. Cursor Copilot 2025-03 05. Slopsquatting: AI suggests packages that don’t existA USENIX Security 2025 study found 19.7% of 2.23 million package suggestions from 16 code models were hallucinated. Attackers can register those names. Claude Code Copilot Cursor +5 more 2025 Same pattern
MCP SDKs & servers