PT-2025-47646 · Github+1 · Github Copilot+1

CVE-2025-64660

·

Published

2025-11-20

·

Updated

2025-12-18

CVSS v2.0

9.0

High

VectorAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions GitHub Copilot and Visual Studio Code (affected versions not specified)
Description An issue with access control exists in GitHub Copilot and Visual Studio Code. This allows an authorized attacker to bypass a security feature over a network.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2025-14669
CVE-2025-64660

Affected Products

Github Copilot
Visual Studio Code