Improper access control in GitHub Copilot and Visual Studio Code allows an authorized attacker to bypass a security feature over a network.
CVE-2025-64660 GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability
Published November 21, 2025