Apply patch sensitive file workaround

VS Code - Remote Code Execution Vulnerability

A remote code execution vulnerability exists in VS Code 1.119.0 and earlier versions where a crafted prompt-injection on certain GPT family models can cause the agent to edit sensitive files without presenting confirmation to the user.

Patches

The fix is available starting with VS Code 1.119.1. The fix (https://github.com/microsoft/vscode/commit/be09b4c7a118ae389662646f4fb9dcaa84757521) mitigates this attack by validating paths are unchanged after patch healing.

Workarounds

Avoid including untrusted data in GPT prompts.

References

• The patch for this can be found at https://github.com/microsoft/vscode/commit/be09b4c7a118ae389662646f4fb9dcaa84757521
• An issue for this can be found at https://github.com/microsoft/vscode/issues/316071
• MSRC details for this can be found at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41109