GitHub Copilot: Remote Code Execution via Prompt Injection (CVE-2025-53773)
MentionsGitHub
This post is about an important, but also scary, prompt injection discovery that leads to full system compromise of the developer’s machine in GitHub Copilot and VS Code . It is achieved by placing Copilot into YOLO mode by modifying the project’s settings.json file.
Summary from Embrace The Red.
Explained
The technology and terms in this story. Learn more
- AttackRemote code execution · RCEA flaw that lets an attacker run their own code on someone else's machine over the network.
- AttackPrompt injectionHiding instructions in content an AI reads, so it follows the attacker instead of its user.
- ConceptCVE · Common Vulnerabilities and ExposuresThe public ID system for vulnerabilities, such as CVE-2026-12345, so everyone means the same bug.
Why it was possible
The weaknesses behind this story's CVEs, from each CVE Record.
Vulnerabilities in this story
Severity and exploitation facts from NVD, FIRST, and CISA.
Related coverage
Other sources covering the same vulnerabilities or event.
