CVE-2025-62222 Agentic AI and Visual Studio Code Remote Code Execution Vulnerability
An attacker can execute arbitrary code remotely via command injection in the Visual Studio Code Copilot Chat Extension.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2025-62222?
CVE-2025-62222 is a high-severity command injection vulnerability in Microsoft Visual Studio Code CoPilot Chat Extension, published on 11 Nov 2025. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to execute code over a network.
Which versions are affected by CVE-2025-62222?
It affects 1 product.
Products include Microsoft Github Copilot Chat.
How do I fix CVE-2025-62222?
No fix has been published for CVE-2025-62222 yet. Limit exposure of the affected software until one is available.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2025-62222 being exploited?
There is no known exploitation of CVE-2025-62222 in the wild and no public exploit code.
Public exploit code: 1 proofs of concept on GitHub.
Other vulnerabilities in Microsoft Visual Studio Code CoPilot Chat Extension
- CVE-2026-65675 CoPilot Chat Security Feature Bypass Vulnerability
- CVE-2025-62449 Microsoft Visual Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability
- CVE-2026-50519 Microsoft Visual Studio Code CoPilot Chat Security Feature Bypass Vulnerability
- CVE-2026-23653 GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability
Sources
Also known as GHSA-hcvg-jrfj-vhqx.