CVE-2021-43891

HIGH7.8Published on December 15, 2021

Visual Studio Code Remote Code Execution Vulnerability

CVSS score7.8 / 10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Vendorsmicrosoft

Affected products

Vendors	Prodotto	Versioni
microsoft	visual studio code	< 1.63.2

Git trasformato in una trappola: sette agenti AI possono eseguire codice dai repository

Vulnerabilities

Git Turned into a Trap: Seven AI Agents Can Execute Code from Repositories

Seven AI coding agents execute attacker code via malicious Git core.fsmonitor config when auto-running git status, bypassing trust and sandbox controls.

Sep 3, 20266 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Affected products

Related articles

Git Turned into a Trap: Seven AI Agents Can Execute Code from Repositories