Flutterby™! : Remotely activate YOLO mode via LLM!

GitHub Copilot: Remote Code Execution via Prompt Injection (CVE-2025-53773)

This post is about an important, but also scary, prompt injection discovery that leads to full system compromise of the developer’s machine in GitHub Copilot and VS Code.

It is achieved by placing Copilot into YOLO mode by modifying the project’s settings.json file.