{"@odata.context":"https://api.msrc.microsoft.com/sug/v2.0/sugodata/v2.0/en-US/$metadata#vulnerability/$entity","id":"00000000-0000-0000-0000-000040e17747","releaseDate":"2026-10-13T07:00:00-07:00","cveNumber":"CVE-2026-102234","cveTitle":"Visual Studio Code Security Feature Bypass Vulnerability","releaseNumber":"2026-Oct","vulnType":"Security Vulnerability","latestRevisionDate":"2026-10-13T07:00:00-07:00","description":"<p>Reliance on untrusted inputs in a security decision in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.</p>\n","cweList":["CWE-807: Reliance on Untrusted Inputs in a Security Decision"],"cweDetailsListForSearch":["cwe: CWE-807: Reliance on Untrusted Inputs in a Security Decision","cweUrl: https://cwe.mitre.org/data/definitions/807.html"],"unformattedDescription":"<p>Reliance on untrusted inputs in a security decision in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.</p>","mitreText":"CVE-2026-102234","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-102234","publiclyDisclosed":"No","exploited":"No","latestSoftwareReleaseId":2,"latestSoftwareRelease":"Exploitation Less Likely","olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Visual Studio Code","issuingCna":"Microsoft","issuingCnaId":100000001,"severityId":100000001,"severity":"Important","impactId":100000007,"impact":"Security Feature Bypass","langCode":"en-US","baseScore":"7.4","temporalScore":"6.4","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C","vectorStringSource":"Microsoft","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-807: Reliance on Untrusted Inputs in a Security Decision","https://cwe.mitre.org/data/definitions/807.html"]}],"articles":[{"articleType":"FAQ","description":"<p><strong>What security feature could be bypassed by successfully exploiting this vulnerability?</strong></p>\n<p>An attacker who successfully exploited this vulnerability could bypass the Visual Studio Code Workspace Trust feature, allowing content from an untrusted workspace to run commands or code without the user first granting trust. See <a href=\"https://code.visualstudio.com/docs/editor/workspace-trust\">Workspace Trust</a> for more information.</p>\n","ordinal":10000},{"title":"Visual Studio Code Security Feature Bypass Vulnerability","articleType":"100000000","description":"<p>Reliance on untrusted inputs in a security decision in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.</p>\n","ordinal":10000}],"revisions":[{"cveNumber":"CVE-2026-102234","version":1,"revisionDate":"2026-10-13T07:00:00-07:00","initialDate":"0001-01-01T00:00:00Z","description":"<p>Information published.</p>\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"c8ba92b0-24bc-f111-aaad-000d3a37724b"}]}