CVE-2021-28967: Gimly Matlab

Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days.

The unofficial MATLAB extension before 2.0.1 for Visual Studio Code allows attackers to execute arbitrary code via a crafted workspace because of lint configuration settings.

Affected products

• Gimly Matlab: before 2.0.1 (fixed in 2.0.1)

Published 2021-03-24. Last modified 2026-06-17.