Visual Studio Code Extensions Live Server version 5.7.9 contains a vulnerability that allows attackers to exfiltrate files by tricking users into interacting with a specially crafted HTML page. This vulnerability has a high severity with a CVSS score of 9.1, indicating critical impact on confidentiality and integrity without requiring user privileges or interaction.