Filename-only guard in VS Copilot led to high-severity RCE, patched this Patch Tuesday
wunderwuzzi23 · x · 2026-10-14
Security researcher wunderwuzzi shared the guard code in Visual Studio Copilot meant to prevent Copilot from writing to mcp. and settings.visualstudio.: EditsFunctionHandler.GetEditConfirmationTypeAsync relies only on Path.GetFileName with exact name comparisons and EndsWith checks.
He posed it as a "spot the defect" challenge; the flaw led to a high-severity RCE in Visual Studio and SQL Server Management Studio (CVE-2026-103572), patched in this Patch Tuesday release, with a full write-up to follow.
Related event: Microsoft Patch Tuesday Fixes High-Risk RCE in Visual Studio Copilot(2 posts)→
More from coding & agent
- Is moving messy code into a function real refactoring, or just boxing? — jimmykoppel · 2026-10-14
- Claude Code 2.1.299 is about to ship, says tracker account — ClaudeCodeLog · 2026-10-14
- Agents-first software emerges as a trend as Notion and others ship MCPs — Historical_Kick3793 · 2026-10-14
- Steering coding agents in large repos: missing guardrails produce more slop — yoyoyoav · 2026-10-14
- Coinbase fine-tuned Qwen3.5-9B for fraud prevention — beat frontier models, cheaper — lmoroney · 2026-10-14
- Founder asks: what are you actually letting your AI agents buy? — kevinfee · 2026-10-14