Visual Studio Code is Why I Have Workspace Trust Issues
Uncovers critical RCE vulnerabilities in Visual Studio Code, demonstrating how malicious repository configurations bypass Workspace Trust protections.
Summary
Targeting Developers Through Code Editors
Modern Integrated Development Environments (IDEs) possess deep system integration and automatic extension execution, making developer workstations prime targets for nation-state threat actors.
Deconstructing VS Code's Workspace Trust Boundary
Thomas Chauchefoin and Paul Gerste evaluate Microsoft's Workspace Trust model, analyzing how restricted execution modes attempt to shield developers when opening untrusted repositories.
Chaining CVE-2021-43891 and CVE-2022-30129 to RCE
Dissecting two distinct vulnerabilities reveals how malicious workspace configuration files and vulnerable extension parsers allow remote code execution upon simply cloning a project.
Hardening Development Environments
The researchers present actionable recommendations for IDE developers and engineering teams to audit extension trust boundaries and secure developer toolchains.
Related talks
Main Stage·23 min
David Dworken
David Dworken challenges the developer trust model by discovering critical vulnerabilities in modern IDEs (VS Code, IntelliJ) that execute code simply upon opening a repo.
Main Stage·40 min
Bohan Liu · Zheng Wang · GuanCheng Li
Demonstrates transforming publicly patched Chromium N-day vulnerabilities into remote code execution 0-days across popular Electron and CEF desktop applications.
Main Stage·48 min
David Leadbeater
David Leadbeater revisits 60 years of terminal escape sequence vulnerabilities, detailing multiple remote code execution flaws across major terminal emulators.