CVE-2025-49714: Microsoft Python

High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Trust boundary violation in Visual Studio Code - Python extension allows an unauthorized attacker to execute code locally.

Affected products

• Microsoft Python: before 2025.8.1 (fixed in 2025.8.1)

Published 2025-07-08. Last modified 2026-06-17.