GitHub Copilot RCE via Prompt Injection (CVE-2025-53773)

Sun, 12 Jul 2026 11:56:34 +0000

Engineer — Plan: GitHub Copilot is broadly deployed on developer workstations; a public PoC exists for this RCE-via-prompt-injection path, but EPSS is 0.03 and it is not KEV-listed. Check for an available Copilot update and audit whether your pipelines or editors process untrusted file content through Copilot without sandboxing.
SOC/IR — Learn: Prompt injection as an RCE delivery mechanism in AI coding assistants is a novel developer-endpoint attack class worth adding to your threat model, but the summary provides no IOCs or ATT&CK-mappable TTPs to act on for detection tuning today.
Leader — Plan: If your organization deploys GitHub Copilot to developers (very common), a demonstrated RCE path represents a developer-workstation supply-chain risk; confirm with engineering whether a patched version is available and assess exposure this quarter before exploitation pressure rises.
Signals: CVE-2025-53773 — CISA KEV: not listed, EPSS 0.03, public PoC on GitHub

Ai-Tooling on CuraSec