{"data":{"id":"c7bbd579-3b8f-434b-8915-b78d6112edef","title":"CVE-2025-53773: Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio…","summary":"CVE-2025-53773 is a command injection weakness (CWE-77) in GitHub Copilot and Visual Studio. The source states that it allows an unauthorized attacker to execute code locally. NVD has not yet provided its own assessment, and the entry was published on 08/12/2025 and last modified on 08/15/2025.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-53773","publishedAt":"2025-08-12T18:15:45.940Z","cveId":"CVE-2025-53773","cweIds":["CWE-77"],"cvssScore":"7.8","cvssSeverity":"high","severity":"high","attackType":["prompt_injection"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["Microsoft"],"affectedVendorsRaw":["GitHub Copilot","Visual Studio"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"GitHub Copilot and Visual Studio command injection allowing local code execution","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.03312,"epssCheckedAt":"2026-11-04T18:09:13.251Z","kevDateAdded":null,"advisoryAliases":["GHSA-3m2x-p87c-pwv6"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-04T18:09:19.016Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-88"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"plugin","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":["AML.T0051"],"fixes":[]}}