Session fixation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.