One trailing dot let Copilot rewrite its own config: Microsoft patches VS/SSMS RCE (CVE-2026-103572)
wunderwuzzi23 · x · 2026-10-23
Security researcher Johann Rehberger disclosed a remote code execution vulnerability (CVE-2026-103572) in Visual Studio Copilot and SSMS, patched by Microsoft as Important severity.
- Root cause: Windows/NTFS ignores trailing dots, so settings.json. passes Copilot's path validation as settings.json.
- Exploit: Copilot could rewrite its own config, point an MCP server or ripgrepPath at an attacker binary, and achieve arbitrary command execution — including via indirect prompt injection by a third party.
- Scope: The flaw lives in the shared Microsoft.VisualStudio.Copilot.Core.dll, affecting Visual Studio 2026, SSMS, and older versions including VS 2022.
- Fixed via path normalization; patch shipped the same day.
More from coding & agent
- THU-KEG Releases RIDAR to Detect and Intervene in Research Agent Integrity Violations — THU-KEG · 2026-10-23
- After LiteLLM mess: delay new packages 24h, but install OS updates instantly — altryne · 2026-10-23
- Dev hooks OpenAI Realtime API to a DIY robot arm: sim-trained skills plus vision for tic-tac-toe — Tarun122 · 2026-10-23
- Same LoRA on every Qwen3.5 size: 9B beats 27B, and nearly all the gain is learning to say no — spilldahill · 2026-10-23
- 200 concurrent LLM agents on a 1GB, $6/month VM — the bottleneck was our own save locks — swarmagent · 2026-10-23
- Phone farms with robotic arms: a new setup lets AI agents bypass app anti-bot controls — TinfoilTricorn · 2026-10-23