Security Feature Bypass via Azure DevOps Code Search Endpoint Override

Summary

A security feature bypass vulnerability exists in VS Code 1.136.1 and earlier versions where an experimental workspace setting allowed the Azure DevOps code search endpoint to be overridden. A malicious workspace could configure an attacker-controlled endpoint, causing Copilot code search requests and the user's Azure DevOps authentication token to be sent to that endpoint.

Details

An attacker would need to convince the user to open a specially crafted workspace and trigger Azure DevOps code search.

Patches

The fix is available starting with VS Code 1.136.2. The fix (e57527e) removes the configurable Azure DevOps code search endpoint override so requests are always sent to the expected Azure DevOps endpoint.

Workarounds

Do not open untrusted workspaces. If updating is not immediately possible, disable Azure DevOps code search and remove the github.copilot.chat.workspace.prototypeAdoCodeSearchEndpointOverride setting from workspace configuration.

References

• The patch for this can be found at e57527e
• An issue for this can be found at #341376
• MSRC details for this can be found at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102231