{"data":{"id":"cbe9b238-8538-47bb-bdab-483abc7e9634","title":"Visual Studio Copilot and SSMS Remote Code Execution (CVE-2026-103572)","summary":"Microsoft patched a Remote Code Execution vulnerability in Visual Studio Copilot, reported by the researcher in August and classified as Important severity. The flaw sits in Microsoft.VisualStudio.Copilot.Core.dll and affects Copilot in Visual Studio and SQL Server Management Studio, which share code. A trailing dot in a filename passes the path validation check in EditsFunctionHandler.GetEditConfirmationTypeAsync, but Windows strips the dot on write, letting Copilot modify protected MCP and settings files and achieve arbitrary command execution.","solution":"Patch released by Microsoft for the Visual Studio Copilot and SSMS vulnerability.","labels":["security"],"sourceUrl":"https://embracethered.com/blog/posts/2026/visual-studio-copilot-remote-code-execution/","publishedAt":"2026-10-13T22:00:40.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":["prompt_injection","other"],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["Microsoft"],"affectedVendorsRaw":["Visual Studio Copilot","GitHub Copilot","SQL Server Management Studio"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-13T22:00:40.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","availability"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":["AML.T0051"]}}