CVE-2022-24526: Visual Studio Code Spoofing Vulnerability

According to the CVSS, User Interaction is Required. What interaction would the user have to do?

The user would have be enticed to open a malicious file in vscode. Users should never open anything that they do not know or trust to be safe.