The vulnerability in GitHub Copilot 1.372.0 involves unauthorized filesystem access outside the workspace folder through a file-handler URI parameter used by the fetch_webpage function. This flaw bypasses user approval mechanisms, potentially allowing an attacker to exfiltrate data if indirect prompt injection is leveraged. There is no CVSS score or detailed vendor advisory available, and no known exploits in the wild have been reported.

An attacker exploiting this vulnerability could access files outside the designated workspace folder without user consent, leading to potential data exfiltration. The impact depends on the attacker's ability to perform indirect prompt injection to trigger the unauthorized file access. No evidence of active exploitation is currently known.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution with untrusted inputs that might lead to prompt injection. No official fix or temporary workaround has been documented.