CVE-2025-64660

Medium · 5.7

CVSS

5.7

EPSS

0.6%

Published

Nov 20, 2025

CISA due date

—

The record

Improper access control in GitHub Copilot and Visual Studio Code allows an authorized attacker to bypass a security feature over a network.

Ecosystem	Package	Introduced	Fixed