← Database

CVE-2026-54981

HIGH CVSS: 7.8 Published: 2026-08-11 Modified: 2026-08-17

Description

Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized attacker to bypass a security feature locally.

Affected Platforms

Microsoft PythonMicrosoft Visual Studio Code

Weakness Type

CWE-693, CWE-829

References