RCE Vulnerabilities Exploited in GitHub Codespaces via VS Code Config Files

Orca Security researchers identified multiple attack vectors in GitHub Codespaces that allow remote code execution (RCE) by opening malicious repositories or pull requests. Attackers can exploit VS Code configuration files to execute arbitrary commands, exfiltrate GitHub tokens, and access sensitive resources without user consent. This affects developers using the cloud-based development environment.