cve/2025/CVE-2025-53773.md

CVE-2025-53773

Description

Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio allows an unauthorized attacker to execute code locally.

POC

Reference

• https://embracethered.com/blog/posts/2025/github-copilot-remote-code-execution-via-prompt-injection/

Github

• https://github.com/B1ack4sh/Blackash-CVE-2025-53773
• https://github.com/PuddinCat/GithubRepoSpider
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/persistent-security/poc-ai-copilot-rce
• https://github.com/tjtrimboli/ves-system
• https://github.com/yembors64632/cve_monitor_Public