🛡️ CVE-2025-53773

The items that name it 6

• AI Agent Hacking Writeups
  repo2026-09-17It is written here as CVE-2025-53773 (GitHub Copilot, remote code execution via prompt injection).

  GitHub Copilot, remote code execution via prompt injection

• requie/AI-Red-Teaming-Guide
  repo2026-07-08

  GitHub Copilot remote code execution via prompt injection that wrote to the agent's configuration files (enabling VS Code "YOLO mode")

• Advanced Prompt Injection Techniques 2026: 7 Attack Chains
  article2026-07-04

  Remote Code Execution: indirect prompt injection planted in a repository file causes Copilot to generate and execute code with the developer's full system permissions.

• Vulnerability Garden
  tool2026-05-13
• anmolksachan/AI-ML-Free-Resources-for-Security-and-Prompt-Injection
  repo2026-05-07

  GitHub Copilot RCE, CVSS 9.6, via prompt injection

• 973 MCP Packages, 71% Single-Maintainer: A Practitioner
  articleIt is written here as CVE-2025-53773 (GitHub Copilot, CVSS 7.8: malicious code comments modify VS Code settings, bypass approval, achieve RCE).

  GitHub Copilot, CVSS 7.8: malicious code comments modify VS Code settings, bypass approval, achieve RCE