CVE-2026-54981: Microsoft Python

High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized attacker to bypass a security feature locally.

Affected products

• Microsoft Python: affected versions not specified

Published 2026-08-11. Last modified 2026-08-22.