Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Incorrect privilege assignment in Visual Studio Code allows an authorized attacker to bypass a security feature locally.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
With MCP sandboxing on, VS Code let one server use network or write access you approved for another, because approvals sat in a shared bucket (CVE-2026-102851). Fixed in 1.141.1; re-approve each server.
MSRC CVE-2026-102851 (CVSS 3.1 6.1). Through 1.141.0 approvals sat in shared sandbox config; 1.141.1 ignores old shared grants instead of migrating them. No public exploitation reported. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102851 https://github.com/microsoft/vscode/issues/341381