Visual Studio Code & Agentic AI workflows RCE
Date: 2025-09
Affected: Visual Studio Code & Agentic AI workflows RCE
Attack vector: prompt-injection
Category: real-world
Severity: High
CVE: CVE-2025-55319
CWE: CWE-77
CVSS:  (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)

Command injection in agentic AI workflows can let a remote, unauthenticated attacker cause VS Code to run injected commands on the developer’s machine.


Mitigations:

Architectural layers (MAESTRO):