GitHub threat report

CVE-2026-50519, a medium-severity vulnerability in GitHub Copilot Chat version 1.0.0, allows unauthorized information disclosure through an insecure default resource initialization. The flaw requires user interaction and has a CVSS score of 6.5. Microsoft has published an advisory and released an official patch; no active exploits have been reported.

• CVE-2026-50519: CWE-1188: Initialization of a Resource with an I(opens in a new tab)