Hub/AI Security/GitHub Copilot (VS Code)
GitHub Copilot (VS Code)
GitHub / Microsoft · Official site
| Feature | Status | Notes | Source | Checked |
|---|---|---|---|---|
| Tool-call approval prompts | Yes | Tool and terminal approvals; auto-approve and Autopilot are opt-in | Source | 2026-11-04 |
| Per-tool allow / deny | Partial | Auto-approve settings and edit globs; per-tool page returned 404 | Source | 2026-11-04 |
| Sandboxing | Partial | Docs reference agent sandboxing and workspace trust | Source | 2026-11-04 |
| OAuth for remote MCP | Partial | Static oauth.clientId; DCR/CIMD unconfirmed (from /mcp matrix) | Source | 2026-11-04 |
| Verified marketplace listings | Unknown | Not found in official docs checked 2026-11-04 | — | 2026-11-04 |
| Auto-install / auto-update control | Unknown | Not found in official docs checked 2026-11-04 | — | 2026-11-04 |
| Admin allowlists | Partial | Org MCP registry restriction (public preview, Business / Enterprise) | Source | 2026-11-04 |
| Audit logs | Yes | Copilot events in enterprise audit log | Source | 2026-11-04 |
| Data retention / training opt-out | Unknown | Not found in official docs checked 2026-11-04 | — | 2026-11-04 |
| Security disclosure page | Yes | Advisories published on microsoft/vscode and github/github-mcp-server | Source | 2026-11-04 |
Advisories (18)
Security Feature Bypass via Shared MCP Sandbox Permission Approvals
VS Code (Copilot Chat / MCP) · CVE-2026-102851 · GHSA-qghm-w43w-vx8v
Remote Code Execution via Custom Hook Edits in the Copilot Harness
VS Code (Copilot Chat / MCP) · CVE-2026-102232 · GHSA-fq62-m6f5-c7h9
Information Disclosure through Automatic Remote Image Fetch in Chat
VS Code (Copilot Chat / MCP) · CVE-2026-81380 · GHSA-vww8-mqc2-4x8v
Azure DevOps access token disclosure through GitHub Copilot Chat workspace settings
VS Code (Copilot Chat / MCP) · CVE-2026-81381 · GHSA-rvgr-2w56-2j67
Agent Network Filter Bypass Vulnerability
VS Code (Copilot Chat / MCP) · CVE-2026-81379 · GHSA-hr37-8jwr-q8p8
Visual Studio Code MCP gallery metadata path traversal
VS Code (Copilot Chat / MCP) · CVE-2026-81377 · GHSA-g6p5-6xp8-5jwg
Agent Network Filter Security Feature Bypass
VS Code (Copilot Chat / MCP) · CVE-2026-81357 · GHSA-4xcg-6mm5-hj26
Agent Network Filter Security Feature Bypass
VS Code (Copilot Chat / MCP) · CVE-2026-81378 · GHSA-4gv7-q2x8-32p8
Remote code execution through workspace-configured remote agent host connections
VS Code (Copilot Chat / MCP) · CVE-2026-78462 · GHSA-2cmq-rv52-5rf6
Agent network filter bypass via IPv4-mapped IPv6 literals
VS Code (Copilot Chat / MCP) · CVE-2026-69306 · GHSA-6xp2-9cj3-f488
Copilot Custom Agent Hook Remote Code Execution Vulnerability
VS Code (Copilot Chat / MCP) · CVE-2026-70335 · GHSA-w79w-rj9h-vg4f
Copilot Chat Security Feature Bypass Vulnerability
VS Code (Copilot Chat / MCP) · CVE-2026-65675 · GHSA-3hjg-cwxj-qfc6
Across the hub
Weekly, free
What changed in AI integrations
One short email when MCP clients, plugin ecosystems, IDE integrations, AI plan prices or security advisories change. Every item is sourced.