Coding assistants

CVE-2026-26129 is a vulnerability in M365 Copilot, classified under CWE-138 (Improper Neutralization of Special Elements). An unauthorized attacker can exploit it over a network to disclose information. NVD had not yet provided an assessment at publication, and the record was published and last modified on 05/07/2026 with Microsoft Corporation as the source.

CVE-2026-6662 affects ericc-ch copilot-api up to 0.7.0. A flaw in the function cors of src/server.ts, in the Token Endpoint component, produces a permissive cross-domain policy that accepts untrusted domains. The attack can be launched remotely, and public exploit code exists. VulDB scores it CVSS 4.0 6.9 (MEDIUM), with weaknesses CWE-346 and CWE-942.

CVE-2026-26137 is a server-side request forgery (CWE-918) in Microsoft 365 Copilot's Business Chat. According to the description, an authorized attacker over a network can use it to elevate privileges. NVD has not yet provided an assessment, and the record was published on 03/19/2026.

CVE-2026-26133 describes an AI command injection flaw in M365 Copilot. The source states that an unauthorized attacker can exploit it over a network to disclose information. NVD has not yet provided an assessment, and the vulnerability was published on 03/16/2026.

GitHub Copilot CLI's shell tool contains a vulnerability in which crafted bash parameter expansion patterns (such as ${var@P}, assignment forms like ${var=value}, indirect ${!var}, and nested $(cmd) inside ${...}) can hide command execution inside commands the safety assessment classifies as read-only. An attacker who can influence the commands the agent runs, for example through prompt injection in repository files, MCP server responses, or user instructions, could achieve arbitrary code execution on the user's workstation, even in modes that require approval for write operations. The issue affects versions prior to 0.0.423.

CVE-2026-21523 is a time-of-check time-of-use (TOCTOU) race condition, classified as CWE-367, in GitHub Copilot and Visual Studio. The source states that an authorized attacker can exploit it to execute code over a network. NIST has not yet provided an NVD assessment, and the entry was published 02/10/2026.

CVE-2026-21516 is a command injection flaw (CWE-77) in GitHub Copilot, caused by improper neutralization of special elements used in a command. According to the source, an unauthorized attacker can execute code over a network. NVD had not yet provided an assessment when the record was last modified on 02/11/2026, and the source lists Microsoft Corporation as the advisory source.

CVE-2026-21257 is a command injection flaw (CWE-77) in GitHub Copilot and Visual Studio. The source says an authorized attacker can exploit it over a network to elevate privileges. NVD has not yet provided an assessment, and the NVD record was published 02/10/2026 and last modified 02/11/2026.

CVE-2026-21256 is an improper neutralization of special elements used in a command, also known as command injection (CWE-77), in GitHub Copilot and Visual Studio. The source states that an unauthorized attacker can execute code over a network. NVD has not yet provided an assessment, and the record was published on 02/10/2026.

CVE-2026-21521 is classified as CWE-150, Improper Neutralization of Escape, Meta, or Control Sequences, in Copilot. The source states that an unauthorized attacker can disclose information over a network. NVD has not yet provided an assessment, and the affected software configurations list is not populated in the source.

CVE-2026-21520 is an exposure of sensitive information to an unauthorized actor in Copilot Studio. According to the source, an unauthenticated attacker can view sensitive information through a network attack vector. The weakness is classified as CWE-77, Improper Neutralization of Special Elements used in a Command ('Command Injection'), and NVD has not yet provided an assessment.