CVE-2026-54981

Microsoft · Published August 11, 2026

7.8

CVSS v3.1

HIGH

Patch availableGet patch

Description

Visual Studio Code Python Extension Security Feature Bypass Vulnerability. Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized attacker to bypass a security feature locally.

Affected Products

Python extension for Visual Studio Code

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C