AI developer toolsBriefPublic record
GitHub Copilot / VS Code “YOLO mode” RCE (CVE-2025-53773)
Prompt injection got Copilot to write `chat.tools.autoApprove` into `.vscode/settings.json`, enabling RCE.
- Disclosed
What happened
- Prompt injection got Copilot to write `chat.tools.autoApprove` into `.vscode/settings.json`, enabling RCE. Fixed in the Aug 2025 Patch Tuesday.
Live scores
Live scores
CVE-2025-53773- EPSS
- 0.032
some chance of attack soon - VEDAS
- 0.961
strong exploit evidence - On CISA KEV
- Not listed
- Detection rule
- None yet
Sources
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53773
- https://embracethered.com/blog/posts/2025/github-copilot-remote-code-execution-via-prompt-injection/
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.