CVE-2025-55319 in VS Code 1.96.*

Ai command injection in Agentic AI and Visual Studio Code allows an unauthorized attacker to execute code over a network.

Severity

Critical 9.8

Exploitation

1% chance of exploit
in the next 30 days

Fix

Update to 1.104.0

Where

Workstation tool

How it matched

Version line match

First seen

2026-11-05 01:13:58 UTC

Source

https://nvd.nist.gov/vuln/detail/CVE-2025-55319