VS Code agent network filters bypassed by alternate URL and address representations

What happened

Microsoft disclosed two bypasses in optional agent network filtering. Backslashes or mixed separators let the integrated browser interpret a URL differently from the policy checker; equivalent IPv4-mapped IPv6 addresses bypassed IPv4 entries in deny-only policies. Both require particular filter configurations and are fixed in 1.136.2. Each advisory assigns CVSS 3.1 8.2; neither reports confirmed exploitation.

Until updated, Microsoft advises disabling integrated-browser chat tools for the URL-parsing flaw and using a nonempty explicit allow-list for the address-representation flaw. These are two related vulnerabilities grouped into one radar record.