Post #3844702
2026-07-15 23:12 UTC
@ajn142@infosec.exchange @ifin@infosec.exchange I have a friend testing Mac. I can test Linux later.
Replies (1)
-
@ajn142@infosec.exchange 2026-07-16 06:46
@Sempf@infosec.exchange @ifin@infosec.exchange I made a half-assed effort to test macOS, and couldn’t replicate, but it may not have been sufficient. That makes me wonder if this is purely a bad decision in VSCode to prefer a repo-level git executable, or an interaction of VSCode with OS-level functionality hitting an unintended edge case on one (admittedly primary) platform. I also wonder if disabling the Git extension mitigates the vulnerability. That and a targeted look at source code might turn up some hints about cross-platform applicability (or point to other functionality that could be abused).