CVE-2025-49714

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-49714
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-49714.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-49714
Published
2025-07-08T17:15:58.687Z
Modified
2026-04-10T05:32:54.058524Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

Trust boundary violation in Visual Studio Code - Python extension allows an unauthorized attacker to execute code locally.

References

Affected packages

Git / github.com/microsoft/vscode-python

Affected ranges

Type
GIT
Repo
https://github.com/microsoft/vscode-python
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
8b8d5c2a0853f2eee55d13f305417d32d416d0d0
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "2025.8.1"
        }
    ]
}

Affected versions

0.*
0.0.3
0.0.4
0.1.0
0.1.1
0.1.2
0.1.3
0.2.0
0.2.1
0.2.2
0.2.3
0.2.4
0.2.5
0.2.6
0.2.7
0.2.8
0.2.9
0.3.0
0.3.10
0.3.11
0.3.12
0.3.13
0.3.14
0.3.15
0.3.18
0.3.19
0.3.20
0.3.21
0.3.22
0.3.23
0.3.24
0.3.3
0.3.4
0.3.5
0.3.6
0.3.7
0.4.0
0.4.1
0.4.2
0.5.0
0.5.1
0.5.2
0.5.3
0.5.4
0.5.6
0.5.7
0.5.8
0.5.9
0.6.5
0.6.9
0.7.0
0.8.0
2018.*
2018.1.0
2018.2.0
2018.3.0
2018.4.0
2018.5.0
2018.6.0
2018.7.0
2018.7.1
2018.8.0
2018.9.0
2019.*
2019.3.6558
2022.*
2022.6.0
Other
insiders-lkg
release/pythonExtensionApi/1.*
release/pythonExtensionApi/1.0.0
release/pythonExtensionApi/1.0.1
release/pythonExtensionApi/1.0.2
release/pythonExtensionApi/1.0.3
release/pythonExtensionApi/1.0.4
release/pythonExtensionApi/1.0.5
v0.*
v0.3.11
v2023.*
v2023.11.11581008
v2023.11.11651007
v2023.11.11661013
v2023.11.11671008
v2023.11.11721014
v2023.11.11731012
v2023.11.11741005
v2023.11.11771009
v2023.11.11781018
v2023.11.11791005
v2023.11.11801006
v2023.11.11802201
v2023.11.11811010
v2023.11.11841013
v2023.13.11862047
v2023.9.11461009
v2023.9.11491011
v2023.9.11521013
v2023.9.11561008
v2023.9.11571010
v2024.*
v2024.4.0
v2025.*
v2025.6.0
v2025.8.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-49714.json"