GitHub Copilot for Jetbrains Information Disclosure Vulnerability
Improper neutralization of special elements used in a command ('command injection') in Github Copilot allows an authorized attacker to disclose information locally.
Read at Microsoft Security Response Center
- Vendor
- Microsoft, GitHub, JetBrains
- Product
- Copilot, GitHub Enterprise / Actions
- Exposure class
- AI infrastructure, Developer platform
Why it ranks 34 (Notable)
- Product class: AI infrastructure, developer platform
- Widely deployed vendor product (Microsoft)
- Vendor security advisory
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- Microsoft Security Response Center (msrc.microsoft.com)
- CVE-2026-83953 on this site · NVD · CVE.org · Vulnpedia