VS Code 1.141.1 patches 10 CVEs, including a Copilot agent hook-edit bypass and an MCP sandbox escape

CVE-2026-102232 let prompt injection get the Copilot agent to edit a lifecycle-hook file without confirmation, and CVE-2026-102851 let one sandboxed MCP server use another server's approved network and write permissions; the rest are Workspace Trust bypasses and click-to-run RCEs. Update to 1.141.1 or later (check pinned dev containers too), then re-approve each MCP server's permissions, since the fix ignores old shared grants.