CVE-2026-50510Patch(microsoft / github_copilot)

LOWCVSS 7.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch microsoft github_copilot systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Improper restriction of names for files and other resources in Github Copilot allows an unauthorized attacker to execute code locally.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-641

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • github_copilot

Threat summary

  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • 1 total mentions across 1 day

Affected systems

Vendors
Products
github_copilot

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-07-15: 1Patch / Workaround · 2026-07-15: 107-15
Signal classification1 categories
Patch
1100.0%
Referenced assets1 URL
Full discourse1 post
  • Windows Forum@windowsforum
    Patch

    🪟 Copilot in JetBrains had a code-execution bug hiding behind a “local resource.” Update to 1.13.0-251 now—because your coding assistant shouldn’t moonlight as an attack surface. https://windowsforum.com/threads/cve-2026-50510-update-github-copilot-jetbrains-plugin-to-1-13-0-251.438594/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #GithubCopilot #JetbrainsIdes #Cve202650510 #CodeExecution https://t.co/TIAY82oB3r

    Post summary

    The tweet alerts that CVE‑2026‑50510 is a code‑execution flaw in the JetBrains Copilot plugin and advises users to update to version 1.13.0‑251, with no evidence of active exploitation or a PoC.

    0000013
    1.2K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appmicrosoftgithub_copilot-jetbrains-

Explore more