MediumVulnerability
CVE-2026-83953 GitHub Copilot for Jetbrains Information Disclosure Vulnerability
- Identifier
- CVE-2026-83953
- Published
- Record updated
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
Summary
CVE-2026-83953 is an information disclosure vulnerability in GitHub Copilot for JetBrains, classified as improper neutralization of special elements used in a command ('command injection'). The source states that an authorized attacker can exploit it to disclose information locally. The source does not give affected versions or further detail on the attack path.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Topics
Related items
- InfoCVE-2026-119990 Azure OpenAI Elevation of Privilege VulnerabilitySame vendor · MSRC Security Update Guide
- HighCVE-2026-108456 Azure AI Foundry Elevation of Privilege VulnerabilitySame vendor · MSRC Security Update Guide
- HighGHSA-h4xc-3qfq-jf93: Pydantic AI Web chat UI (`Agent.to_web()`, `clai web`): a website visited by the developer can trigger agent runs and server-side tool execution on the local chat endpointSame vendor · GitHub Advisory Database
- LowGHSA-6gw6-rv2g-25mg: Kiota: Unsafe oauth_card_path references in Kiota-generated API plugin manifestsSame vendor · GitHub Advisory Database
- MediumCVE-2026-89278: GPTranslate WordPress plugin exposes plaintext API key to unauthenticated usersSame vendor · NVD/CVE Database