VS Code - Secret exfiltration vulnerability

A secret exfiltration vulnerability exists in VS Code 1.128.0 and earlier versions where, if you open a malicous workspace that contains hidden advanced copilot settings in the workspace settings your Copilot token (30m lifetime) may be sent to a malicious upstream server.

Patches

The fix is available starting with VS Code 1.128.1. The fix (f05bcd1) mitigates this attack by only respecting hidden advanced settings in a trusted workspace.

Workarounds

Use external tooling to inspect workspace settings for any malicious URLs prior to opening an untrusted workspace on versions of VS Code <=1.128.0

References

• The patch for this can be found at f05bcd1
• An issue for this can be found at #325846
• MSRC details for this can be found at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47282