Cyber Posture

CVE-2025-62222

HighRCE

Published: 11 November 2025

Published
11 November 2025
Modified
14 November 2025
KEV Added
Patch
CVSS Score 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score 0.0011 29.8th percentile
Risk Priority 18 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2025-62222 is a high-severity Improper Input Validation (CWE-20) vulnerability in Microsoft Github Copilot Chat. Its CVSS base score is 8.8 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Client Execution (T1203); ranked at the 29.8th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-2 (Flaw Remediation).

Threat & Defense at a Glance

What attackers do: exploitation maps to Exploitation for Client Execution (T1203) and 1 other technique. What defenders deploy: see the NIST 800-53 controls recommended below.
Threat & Defense Details

Mitigating Controls (NIST 800-53 r5)AI

prevent

Directly addresses the CVE by requiring timely identification, reporting, and correction of the command injection flaw through patching the Visual Studio Code CoPilot Chat Extension.

prevent

Prevents command injection exploitation by enforcing proper information input validation and sanitization at entry points in the chat extension's command processing.

prevent

Mitigates risk by restricting or approving user-installed software like the vulnerable CoPilot Chat Extension, preventing its deployment on systems.

MITRE ATT&CK Enterprise TechniquesAI

T1203 Exploitation for Client Execution Execution
Adversaries may exploit software vulnerabilities in client applications to execute code.
T1059 Command and Scripting Interpreter Execution
Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries.
Why these techniques?

The vulnerability is a command injection (CWE-77) in a VS Code extension enabling remote arbitrary command execution with user interaction, directly mapping to T1203 (Exploitation for Client Execution) via the client-side vuln and T1059 (Command and Scripting Interpreter) for the resulting OS command execution.

Confidence: HIGH · MITRE ATT&CK Enterprise v19.0

NVD Description

Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to execute code over a network.

Deeper analysisAI

CVE-2025-62222 is a command injection vulnerability stemming from improper neutralization of special elements used in a command, classified under CWE-20 and CWE-77. It affects the Visual Studio Code CoPilot Chat Extension, enabling an unauthorized attacker to execute arbitrary code over a network. The vulnerability received a CVSS v3.1 base score of 8.8 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H), indicating high severity due to its potential for significant impact on confidentiality, integrity, and availability.

An attacker can exploit this vulnerability remotely with low complexity and no required privileges, but it necessitates user interaction, such as clicking a malicious link or engaging with crafted content in the extension's chat interface. Successful exploitation allows the attacker to execute arbitrary commands on the victim's machine, potentially leading to full system compromise, data theft, or further lateral movement within the environment.

For mitigation details, including patches and workarounds, refer to the official advisory from Microsoft Security Response Center at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62222. The vulnerability was published on 2025-11-11T18:15:49.887.

Details

CWE(s)

Affected Products

microsoft
github copilot chat
≤ 0.32.5

CVEs Like This One

CVE-2025-21302Same vendor: Microsoft
CVE-2026-21518Same vendor: Microsoft
CVE-2026-21516Same vendor: Microsoft
CVE-2026-21229Same vendor: Microsoft
CVE-2026-20951Same vendor: Microsoft
CVE-2025-59252Same vendor: Microsoft
CVE-2025-24049Same vendor: Microsoft
CVE-2026-32183Same vendor: Microsoft
CVE-2025-59272Same vendor: Microsoft
CVE-2025-59286Same vendor: Microsoft

References