CVE-2025-66389

GitHub Copilot 1.372.0 allows filesystem access outside of a workspace folder (without user...

7.5 High

GitHub Copilot 1.372.0 allows filesystem access outside of a workspace folder (without user approval) via a file-handler URI parameter to fetch_webpage. Therefore, exfiltration could occur if there is indirect prompt injection.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: None
Availability: None

Exploit likelihood

1.18%Up 0.8 points since Jun 23, 2026

What each source reports

CVE List Score used 7.5

Record: CVE-2025-66389
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness: CWE-552
Updated: 2026-11-02

EUVDEUVD-2025-210298 7.5

Record: EUVD-2025-210298
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated: 2026-11-02

GitHub AdvisoriesGHSA-7vc2-x95v-g6m9 7.5

GitHub Copilot 1.372.0 allows filesystem access outside of a workspace folder (without user...

Record: GHSA-7vc2-x95v-g6m9
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness: CWE-552
Updated: 2026-11-02

NVD 7.5

Record: CVE-2025-66389
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness: CWE-552
Updated: 2026-11-02

Affected products

microsoft github copilot

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-66389 is a high vulnerability (CVSS 7.5) in Microsoft Github Copilot, published June 22, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.18%, the 67th percentile. No source names a fixed version.