CVE-2025-66389

GitHub Copilot 1.372.0 is identified as vulnerable. The flaw is in the file-handler URI parameter to fetch_webpage, allowing filesystem access outside the workspace folder without user approval. This could enable data exfiltration in scenarios with indirect prompt injection. Connected references ...