CVE-2021-29658: Vscode-Rufo Project Vscode-Rufo

High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days.

The unofficial vscode-rufo extension before 0.0.4 for Visual Studio Code allows attackers to execute arbitrary binaries if the user opens a crafted workspace folder.

Affected products

• Vscode-Rufo Project Vscode-Rufo: before 0.0.4 (fixed in 0.0.4)

Published 2021-03-31. Last modified 2026-06-17.