Microsoft released Visual Studio Code 1.132.1 as a security patch addressing seven vulnerabilities within the Chat, Terminal, Electron, and network subsystems, just six days after the feature-rich 1.132 release. This update includes critical fixes for remote code execution flaws and targets the expanding AI agent attack surface following a major architectural shift with the new Agent Host Protocol. Users are encouraged to check for updates immediately to secure their development environment, as the patch enhances safety against potential exploits. Notably, the base release added features like a dedicated Agents Window and improved voice dictation, while also indicating a proactive approach to security in response to the evolving capabilities of AI agents
Visual Studio Code 1.132.1 Ships as Security Patch, Locking Down 7 Agent and Electron Flaws
Microsoft released Visual Studio Code 1.132.1 on Tuesday to address seven security vulnerabilities across the Chat, Terminal, Electron, and network subsystems. The patch arrives just six days after the feature-rich 1.132 release, which introduced a major architectural shift via the new Agent Host Protocol. Critical remote code execution flaws were patched in the integrated browser and web URL payloads, while four additional fixes target the expanding AI agent attack surface. Users should force a check for updates immediately to secure their development environment.
