Visual Studio Code 1.141.1, released on October 13, 2026, is a security update that addresses two critical vulnerabilities, including a remote code execution flaw (CVE-2026-102238) that requires user interaction to exploit. The previous version, 1.141, introduced significant new features, such as a unified Copilot harness and enhanced session management, positioning the editor as an AI agent control center. Microsoft advises users to upgrade to 1.141.1 immediately and review their sandbox settings to limit agent access to files and networks. The update emphasizes improved security and management while integrating more advanced AI capabilities, reflecting Microsoft's focus on enhancing user experience and safety in coding environments

Visual Studio Code 1.141.1 Security Update Closes Critical 9.6 RCE

Visual Studio Code 1.141 shipped on October 7, 2026, transforming the editor into an AI agent control center with a unified Copilot harness, a session grid, cross-app handoffs, and cross-platform sandboxing. Microsoft followed up just six days later with Update 1.141.1, a security patch that closes two path-traversal vulnerabilities, including a Critical 9.6 remote code execution flaw (CVE-2026-102238). That RCE requires user interaction to exploit and shows no signs of wild use, but it affects every version from 1.0.0 through 1.141.0. Microsoft recommends upgrading to 1.141.1 immediately and reviewing your sandbox settings before handing agents broad access to files and the network.

Visual Studio Code 1.141.1 Security Update Closes Critical 9.6 RCE @ NT Compatible