CVE-2026-83953

I don't have verified information about a vulnerability with the ID CVE-2026-83953, so I can't describe what it affects or how severe it is without risking an inaccurate entry. CVE identifiers are assigned to publicly disclosed security flaws, and the details that matter for governance work are the affected product, severity score, whether a patch exists, and whether exploitation has been reported. Before this tag is published, someone should confirm those facts against the official CVE record at cve.mitre.org or the National Vulnerability Database at nvd.nist.gov. If you can share the source article or advisory, I can write an accurate description based on it.

1 item

EnforcementGlobal2026-11-13

CVE-2026-83953: GitHub Copilot JetBrains Plugin Flaw Exposes Local Data

Microsoft published CVE-2026-83953, a command injection flaw in the GitHub Copilot plugin for JetBrains IDEs, scored CVSS 5.5. A local attacker with low privileges could exploit it to read information from the developer's machine. Plugin version 1.17.0-251 fixes the vulnerability.

GitHub Copilot Microsoft CVE-2026-83953 command injection developer tools AI coding tools patch management privilege separation