CVE-2026-50510
High · 7.8CVSS
7.8
EPSS
0.4%
Published
Jul 14, 2026
CISA due date
—
The record
Improper restriction of names for files and other resources in Github Copilot allows an unauthorized attacker to execute code locally.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-85864 Improper privilege management in Python allows an authorized attacker to elevate… CWE-641
- CVE-2026-46581 In Eclipse Mojarra versions 2.3 and following, URL handing in `DefaultFaceletFactory`… CWE-641
- CVE-2026-50023 yt-dlp is a command-line audio/video downloader. CWE-641
- CVE-2019-25623 Luminance Studio 2.17 contains a denial of service vulnerability that allows local… CWE-641
- CVE-2026-25177 Improper restriction of names for files and other resources in Active Directory Domain… CWE-641