PrivacyHigh
CVE-2025-66389: GitHub Copilot 1.372.0 allows filesystem access outside of a workspace folder (without user approval…
- Occurred
- Jun 22, 2026
- Published
- Jun 22, 2026
- Source
- NVD CVE
Summary
GitHub Copilot 1.372.0 allows filesystem access outside of a workspace folder (without user approval) via a file-handler URI parameter to fetch_webpage. Therefore, exfiltration could occur if there is indirect prompt injection.
Tags
- CVE
- CVE-2025-66389
- cvss:HIGH
Classification
Category confidence: 90%
Severity confidence: 85%
Rationale: CVE describes unauthorized filesystem access and potential data exfiltration via indirect prompt injection in GitHub Copilot.
Classifier: Qwen/Qwen3.5-35B-A3B-FP8