CVE-2026-120779

Not on CISA's list of exploited flaws, and not in the news we track.

SeverityCVSS

9.6of 10, critical

010

Fix it in one click

Fix it in your code

Explain it to me

Each opens with a short prompt that points at Global Hack Map's public runbook for CVE-2026-120779. Nothing runs until you send it.

Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.

Not on CISA's list of exploited flaws, and not in the news we track.

SeverityCVSS

9.6of 10, critical

010

Fix it in your code

Explain it to me

Each opens with a short prompt that points at Global Hack Map's public runbook for CVE-2026-120779. Nothing runs until you send it.

Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.