VS Copilot flaw led to high-severity RCE in Visual Studio and SSMS, now patched as CVE-2026-103572
wunderwuzzi23 · x · 2026-10-14
Security researcher wunderwuzzi disclosed that an issue he found in Visual Studio Copilot — where guard code relies only on filenames to decide whether writes to mcp/settings config files are allowed — resulted in a high-severity RCE affecting Visual Studio and SQL Server Management Studio.
Microsoft assigned CVE-2026-103572 and shipped the patch in this month's Patch Tuesday, with the MSRC bulletin now live. A full technical write-up is coming soon. Another case of AI coding tools themselves becoming the attack surface.
Related event: Microsoft Patch Tuesday Fixes High-Risk RCE in Visual Studio Copilot(2 posts)→
More from coding & agent
- Is moving messy code into a function real refactoring, or just boxing? — jimmykoppel · 2026-10-14
- Claude Code 2.1.299 is about to ship, says tracker account — ClaudeCodeLog · 2026-10-14
- Agents-first software emerges as a trend as Notion and others ship MCPs — Historical_Kick3793 · 2026-10-14
- Steering coding agents in large repos: missing guardrails produce more slop — yoyoyoav · 2026-10-14
- Coinbase fine-tuned Qwen3.5-9B for fraud prevention — beat frontier models, cheaper — lmoroney · 2026-10-14
- Founder asks: what are you actually letting your AI agents buy? — kevinfee · 2026-10-14