CVE-2025-53773

Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio allows an unauthorized attacker to execute code locally.

Affected products

Github Copilot, Visual Studio

Microsoft Visual Studio 2022

< 17.14.12

Fix

Available

CVSS 3.1

7.8 HIGH

EPSS

2.6% (84th percentile)

Weakness

CWE-77

NVD status

Analyzed

Published

2025-08-12