CVE-2021-28793: Lextudio Restructuredtext

Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days.

vscode-restructuredtext before 146.0.0 contains an incorrect access control vulnerability, where a crafted project folder could execute arbitrary binaries via crafted workspace configuration.

Affected products

  • Lextudio Restructuredtext: before 147.0.0 (fixed in 147.0.0)

Published 2021-04-20. Last modified 2026-06-17.