CVE-2026-81380: Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio

GitHub Copilot and Visual Studio Code have a vulnerability where special characters in commands aren't properly filtered, allowing an attacker to inject malicious commands (command injection, where an attacker manipulates input to run unintended commands) and access sensitive information over a network.