NewsPublished 3 Jun 2026

VS Code zero-day lets hackers steal GitHub tokens in one click

Source Bleeping Computer

Description

A security researcher has released exploit code for a Visual Studio Code (VS Code) zero-day vulnerability that allows attackers to steal GitHub authentication tokens by tricking users into clicking a link. [...]

Impact

If exploited, attackers can obtain GitHub OAuth tokens with broad access to the victim's repositories, potentially exposing private code and data. The token allows interaction with GitHub on the user's behalf across all accessible repositories. This could lead to unauthorized access and enumeration of private repositories. However, there are no reports of active exploitation in the wild at this time.

Defensive guidance

Users should clear cookies and local site data for github.dev in their browsers to trigger the GitHub sign-in prompt when clicking links, which can help detect and block attempts to exploit this flaw. Monitor official vendor advisories for updates and patches. Avoid clicking suspicious links related to github.dev until a fix is released.

References

bleepingcomputer.com/news/security/vs-code-zero-day-lets-hackers-steal-github-tokens-in-one-click/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 3 Jun 2026, 07:03 UTC

References

Community reviews