Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized attacker to bypass a security feature locally.Referenceshttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54981