CVE-2026-70334

An incomplete list of disallowed inputs in Visual Studio Code enables unauthorized local attackers to bypass security features, potentially leading to unauthorized access or manipulation of the development environment. Organizations using Visual Studio Code should prioritize addressing this vulnerability to mitigate risks associated with local exploitation. Users and developers relying on this IDE for sensitive projects are particularly at risk and should implement any available patches or mitigations promptly.