CVE-2026-81376: VS Code RCE via Security Feature Bypass; $4,000 bounty.
Write-up: https://samchen.blog/blog/vscode-nested-form-to-rce
Dark Web Informer :verified_paw:
npub1w3…5gymd
2026-10-18 18:21:55 UTC
Author Public Key
npub1w3fflg7g4heq6ulgufz4xmzkv0djqpfhlyrxr4uhcn72hqu5t8tsc5gymdSeen on
wss://relay.momostr.pinkPublished at
2026-10-18 18:21:55 UTCEvent JSON
{
"id": "a37fe169f172fcf89ab160cdd9f9e0d69ec964c94c35b3c220e9296b0d58f32e",
"pubkey": "74529fa3c8adf20d73e8e245536c5663db200537f90661d797c4fcab839459d7",
"created_at": 1792347715,
"kind": 1,
"tags": [
[
"imeta",
"url https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/463/299/546/455/773/original/a7f4ba5a7dccef82.mp4",
"m video/mp4"
],
[
"proxy",
"https://infosec.exchange/@DarkWebInformer/117463299853961130",
"web"
],
[
"proxy",
"https://infosec.exchange/users/DarkWebInformer/statuses/117463299853961130",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/DarkWebInformer/statuses/117463299853961130",
"pink.momostr"
],
[
"-"
]
],
"content": "CVE-2026-81376: VS Code RCE via Security Feature Bypass; $4,000 bounty.\n\nWrite-up: https://samchen.blog/blog/vscode-nested-form-to-rce\nhttps://media.infosec.exchange/infosec.exchange/media_attachments/files/117/463/299/546/455/773/original/a7f4ba5a7dccef82.mp4\n",
"sig": "640438baf84d5d36616588a70f32b6cb31e9c6099ee67c17d70adb74a7baccefa49868dfaac03529e5fc32a03327f5ce70db48860ac33da98453c077879a8188"
}