Signal is active with 9 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Improper control of generation of code ('code injection') in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
It led to a high severity RCE in Visual Studio and SQL Server Management Studio and the patch shipped today for Patch Tuesday. CVE-2026-103572 MSRC Bulletin: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103572 Full write-up will be published soon. 🔥
🧪 PoC RELEASED — Visual Studio Copilot CVE-2026-103572 CVSS 3.1: 8.8 Important (Microsoft) Researcher Johann Rehberger (Embrace The Red) published technical details and PoC demos for a Copilot RCE in Visual Studio. Microsoft's title also names SSMS. How it works (high level): • Indirect prompt injection hijacks Copilot through untrusted content • A trailing-dot path trick bypasses the protection on Copilot's own config files • The agent then registers a rogue MCP server, which the IDE launches ✅ Fixed (Oct 13 Patch Tuesday): • Visual Studio 2022 17.14.42 • Visual Studio 2026 18.10.4 • SSMS: no fixed build listed yet ThreatWire has not reproduced the demos. • Not in CISA KEV • No known exploitation Update Visual Studio, and be careful with Copilot on untrusted projects. Full breakdown 👇 https://www.threatwire.tech/research/visual-studio-and-ssms-copilot-flaw-cve-2026-103572-allows-code-execution #VisualStudio #Copilot #Microsoft #CVE #PoC #PromptInjection #cybersecurity
VS/SSMS Copilot blocked agent writes to .mcp.json by string compare. Ask for ".mcp.json." and Win32 drops the trailing dot: agent adds its own MCP server, RCE (CVE-2026-103572, now patched). Fix: GetFullPath before the check. Canonicalize, then authorize. https://embracethered.com/blog/posts/2026/visual-studio-copilot-remote-code-execution/
PoC and technical details for CVE-2026-103572, an 8.8-severity Visual Studio Copilot RCE and SSMS flaw, are now public. Patch your IDE immediately. #CVE2026103572 #VisualStudio #Copilot #RCE #MicrosoftSecurity #SSMS #Cybersecurity https://securityonline.info/cve-2026-103572-visual-studio-copilot-rce-disclosed/
CVE-2026-103572: a trailing dot let VS/SSMS Copilot rewrite .mcp.json and settings into RCE (CVSS 8.8). Microsoft patched it yesterday; Rehberger showed indirect prompt injection too. Path checks that skip Windows filename canonicalization aren't checks. https://embracethered.com/blog/posts/2026/visual-studio-copilot-remote-code-execution/
你用的AI编程助手本身可能是攻击入口。 CVE-2026-103572：Visual Studio Copilot 和 SSMS 存在远程代码执行漏洞，PoC已公开。🧵
Your IDE's AI assistant can be an RCE entry point. Microsoft patched CVE-2026-103572 (CVSS 8.8): VS Copilot could bypass path validation and write its own config files — exploitable via indirect prompt injection. Patch to VS 2022 17.14.42 or VS 2026 18.10.4. Is your IDE patched?
🤖【AI HOT】Visual Studio Copilot 与 SSMS 远程代码执行漏洞（CVE-2026-103572）技术分析Johann Rehberger 披露 Visual Studio Copilot 与 SQL Server Management Studio 中的远程代码执行漏洞 CVE-2026-103572，根因是利用文件名末尾多加一个点绕过路径校验，写入 .mcp. 或 settings.VisualStudio. 等受保护配置文件，实现任意命令执行。#AI资讯
A trailing dot let Copilot in Visual Studio and SSMS edit its own protected config and run commands, incl. via prompt injection, per researcher Johann Rehberger. Microsoft patched it Oct 13 (CVE-2026-103572, CVSS 8.8). Bounty: $0. https://embracethered.com/blog/posts/2026/visual-studio-copilot-remote-code-execution/ #Copilot #AISecurity
VS Copilot + SSMS RCE bug: CVE-2026-103572 Root cause: trailing dot in filename bypasses Windows path validation → writes to protected .mcp. or settings.VisualStudio. config files → arbitrary code execution. Update VS and SSMS now if you're on Windows.