Session fixation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.
CWE-78, CWE-384, CWE-384