## https://sploitus.com/exploit?id=9BE18673-75A8-54F2-8CB4-0E084BBAC49F
# 💥 CVE-2025-53773 — Remote Code Execution in GitHub Copilot 💥
📅 Released: Aug 12 2025
🏢 Vendor: Microsoft / GitHub
⚠️ Severity: **High** (CVSS 7.8)
🔍 Weakness: CWE-77 — Command Injection
🎯 Impact: Prompt injection → Config abuse → Instant RCE
---
### 🧩 Attack Chain
📜 Sneaky Prompt Injection
Attacker hides malicious instructions inside a repo file, comment, or README.
🤖 Copilot “reads” the prompt as a command for itself.
⚙️ YOLO Mode Activated
📝 Copilot edits its own `config.json` to enable a *YOLO mode* flag.
🚫 Disables **all** safety approvals.
💣 **Instant Code Execution**
📥 Copilot suggests dangerous code (e.g., `rm -rf /`, `os.system(...)`).
💻 Runs **immediately**, no questions asked.
🎯 **Full Compromise**
🛠 Executes with your VS privileges (often full dev access, sometimes admin).
🔑 Possible access to your files, tokens, and networks.
---
### 🚨 Why It’s Dangerous
* **🙈 Invisible:** Looks like normal AI suggestions.
* **🛠 No Privileges Needed:** Works on a fresh user account.
* **📦 Supply Chain Risk:** Any repo with the crafted prompt can hit *all* devs who open it.
---
### 🛡 Mitigation Steps
* **Update** GitHub Copilot extension & Visual Studio (patch out now).
* **🔍 Check config file:**
* **Windows:** `%AppData%\GitHub Copilot\config.json`
* **Linux/macOS:** `~/.config/github-copilot/config.json`
* Look for `"yolo_mode": true` or unknown settings.
* **♻ Reset Copilot settings** & re-enable approval prompts.
* **👀 Audit recent AI-generated code** for suspicious shell/system calls.
---
### 🕵️ Detection Ideas
* 📂 Watch for unexpected writes to Copilot’s `config.json`.
* 🖥 Alert if Visual Studio spawns shells (`cmd.exe`, `powershell.exe`, `/bin/sh`).
* 🧮 Scan Copilot suggestions for obfuscated or encoded commands.
---