CVE-2025-53773

Published Aug 12, 2025

Last updated 9 months ago

GitHub Copilot

API

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-53773 is a vulnerability in GitHub Copilot that allows for remote code execution and full system compromise through prompt injection techniques. The vulnerability lies in GitHub Copilot's ability to modify project files without explicit user approval, specifically targeting the `.vscode/settings.json` configuration file. By injecting malicious prompts into various sources like source code files, web pages, or GitHub issues, an attacker can trick Copilot into adding `"chat.tools.autoApprove": true` to the settings file. This effectively puts the AI assistant into "YOLO mode", disabling user confirmations and allowing it to execute shell commands, browse the web, and perform other privileged actions without oversight, leading to potential system compromise.

Description: Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio allows an unauthorized attacker to execute code locally.
Source: secure@microsoft.com
NVD status: Analyzed
Products: visual_studio_2022

Risk scores

CVSS 3.1

Type: Secondary
Base score: 7.8
Impact score: 5.9
Exploitability score: 1.8
Vector string: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Severity: HIGH

Weaknesses

secure@microsoft.com: CWE-77

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "E5799F24-B0F2-461D-97D5-FED4D23BAC19",
            "versionEndExcluding": "17.14.12",
            "versionStartIncluding": "17.14.0",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.