{"data":{"id":"d57cfe9a-2217-42c5-bca0-536d0737d86c","title":"CVE-2026-45482: Improper limitation of a pathname to a restricted directory ('path traversal') in GitHub Copilot and Visual Studio Code…","summary":"CVE-2026-45482 is a path traversal flaw (CWE-22) in GitHub Copilot and Visual Studio Code. The source says it allows an unauthorized attacker to bypass a security feature locally. NIST has not yet provided an NVD assessment, and Microsoft Corporation is the listed source.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-45482","publishedAt":"2026-06-09T17:17:22.587Z","cveId":"CVE-2026-45482","cweIds":["CWE-22"],"cvssScore":"8.4","cvssSeverity":"high","severity":"high","attackType":[],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["Microsoft"],"affectedVendorsRaw":["GitHub Copilot","Visual Studio Code"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"GitHub Copilot and Visual Studio Code path traversal flaw","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"local","attackComplexity":"low","privilegesRequired":"none","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.00345,"epssCheckedAt":"2026-11-04T18:09:13.655Z","kevDateAdded":null,"advisoryAliases":["GHSA-f78m-9xhc-p52v"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-03T00:09:41.678Z","patchAvailable":null,"disclosureDate":"2026-06-09T17:17:22.587Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-126"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity"],"aiComponentTargeted":"plugin","llmSpecific":false,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":null,"fixes":[]}}