A trailing dot bypasses Copilot's path validation, yielding RCE in Visual Studio and SSMS (CVE-2026-103572)
wunderwuzzi23 · x · 2026-10-14
Security researcher wunderwuzzi disclosed CVE-2026-103572, an Important-severity RCE in Visual Studio Copilot patched by Microsoft on Oct 13. A trailing dot in a config filename bypasses Copilot's path validation, letting it write its own settings files, escape containment, and achieve arbitrary command execution — also exploitable via indirect prompt injection. The vulnerable shared DLL (Microsoft.VisualStudio.Copilot.Core.dll) affects both Visual Studio 2026 and SSMS, including older VS 2022 installs. Patch now.
Related event: Visual Studio Copilot RCE Flaw Patched by Microsoft(4 posts)→
More from coding & agent
- REMORY: learned memory tokens cut repeated tool calls in long agent tasks — lulzxdxdxd · 2026-10-14
- "Can't sleep, my agents require prompting": the agent-era insomnia — mallow610 · 2026-10-14
- Google's Gemini 4 launch marred by reports of hour-long hangs in Antigravity — op7418 · 2026-10-14
- Correct citation, wrong answer: sift-light adds multi-lane retrieval and evidence verification for agents — Deep_Bus_7488 · 2026-10-14
- Claude Code v2.1.299 auto-compacts 200K-token chats after 54 min idle — ashwin-ant · 2026-10-14
- AI notices who still reads every line: slopcore comic pokes at coding-agent complacency — TinfoilTricorn · 2026-10-14