GitHub Copilot and VS Code Security-Feature Bypass (CVE-2026-41109)

GitHub Copilot extension before v1.43.20260512 and Visual Studio Code up to 1.96.x (fixed in VS Code 1.97.0)

A low-privileged local attacker can bypass Copilot's user-consent prompts and content filters, inject malicious code suggestions, silently disable telemetry consent, and leak environment variables and API keys through suggestion logging

Improper validation of inter-process communication between the Copilot extension and the VS Code core when the workspace was marked trusted; the flaw is in the integration layer, not the model