Advisoriesby IbisMicrosoftGHSA-9f6c-63gp-pwpf
MCP Deeplink Install Lacked Essential Information
No fix yet
VS Code - Remote Code Execution Vulnerability
A remote code execution vulnerability exists in VS Code 1.119.0 and earlier versions where installing an MCP from a deeplink omitted certain information which could result in undesired behavior when the MCP server was installed.
Patches
The fix is available starting with VS Code 1.119.1. The fix (https://github.com/microsoft/vscode/commit/be09b4c7a118ae389662646f4fb9dcaa84757521) mitigates this by correctly disclosing environment variables and headers of MCP installs.
Workarounds
Avoid installing MCP servers using untrusted deep links.
References
- The patch for this can be found at https://github.com/microsoft/vscode/commit/be09b4c7a118ae389662646f4fb9dcaa84757521
- An issue for this can be found at https://github.com/microsoft/vscode/issues/316072
- MSRC details for this can be found at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41613
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| vscode Product | all versions | No fix yet |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- Severity from
- GitHub (reviewed advisory)