Microsoft Visual Studio Code MCP Install Dialog Flaw

Microsoft Visual Studio Code has a vulnerability (CVE-2026-41613) in its MCP install dialog that allows code execution via crafted deeplinks.