Untrusted search path in Microsoft Visual Studio Code
| Risk | Medium |
| Patch available | YES |
| Number of vulnerabilities | 1 |
| CVE-ID | CVE-2025-26631 |
| CWE-ID | CWE-426 |
| Exploitation vector | Local |
| Public exploit | N/A |
| Vulnerable software |
Visual Studio Code Universal components / Libraries / Software for developers |
| Vendor | Microsoft |
Security Bulletin
This security bulletin contains one medium risk vulnerability.
1) Untrusted search path
EUVDB-ID: #VU105567
Risk: Medium
CVSSv4.0: 4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2025-26631
CWE-ID:
CWE-426 - Untrusted Search Path
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to escalate privileges on the system.
The vulnerability exists due to usage of an untrusted search path in Visual Studio. A remote user can trick a victim to open a specially crafted file and gain elevated privileges on the target system.
MitigationInstall updates from vendor's website.
Vulnerable software versionsVisual Studio Code: All versions
CPE2.3 External linkshttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-26631
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
