AI Sec Watch: A Security Intelligence Platform for AI Systems

Luu, T.J.

MediumNewsLLM-specific

From SELECT to SYSADMIN with SQL Copilot (CVE-2026-65669)

Source: Embrace The Red(opens in a new tab)
Published: September 30, 2026
Record updated: October 9, 2026

Summary

A researcher presented at BlueHat Asia 2026 in Singapore on Microsoft's Copilot in SQL Server Management Studio (SSMS). The talk covered CVE-2026-65669, a SQL Server Elevation of Privilege Vulnerability that Microsoft rated critical.

Mitigation

So, make sure your installations are up-to-date.

Details

Scores and exploitation

Disclosure date: September 30, 2026

Affected

Vendors: Microsoft

Classification

Attack type: Other
Attack sophistication: Moderate
AI component targeted: Plugin
Impact: Confidentiality,
Integrity
Labels: security

How this record was produced

Summaries, mitigations and labels on this page are generated automatically from the source. The linked source is authoritative.

Original source: https://embracethered.com/blog/posts/2026/from-select-to-sysadmin-sql-copilot-bluehat-asia/

First tracked: September 30, 2026 at 08:01 PM ET, from Embrace The Red

Classifier: claude-haiku-5-5, prompt v4

Classifier confidence: 80% (self-assessed)

Corrections

2026-10-10: Severity changed from critical to medium. Severity capped at medium. High and critical measure technical exploitability and are reserved for vulnerabilities and incidents; this record is a news report.

All corrections

Topics

Coding assistants

Summary

Mitigation

Topics

Related items

Summary

Mitigation

Topics

Related items