Visual Studio Copilot and SSMS Remote Code Execution (CVE-2026-103572)

Embrace The RedOctober 13, 2026AppSec Vulnerabilities AI

MentionsMicrosoft

A . is all you need! Today Microsoft shipped the patch for a vulnerability in Visual Studio Copilot that I reported in August. Microsoft classified it as Important severity Remote Code Execution vulnerability. At the root cause it allows Copilot in Visual Studio or SQL Server Management Studio to bypass a path validation check and write to its own settings and configuration files .

Summary from Embrace The Red.

Read the full article at Embrace The Red

Explained

The technology and terms in this story. Learn more

Why it was possible

The weaknesses behind this story's CVEs, from each CVE Record.

CWE-94Improper Control of Generation of Code ('Code Injection')Input becomes part of code the application executes, handing attackers the application itself.

Vulnerabilities in this story

Severity and exploitation facts from NVD, FIRST, and CISA.

CVE-2026-103572High 8.8EPSS 1.0%

More in AppSec

Cybersecurity jobs available right now: October 27, 2026

Help Net Securityjust nowAppSec

Worm armed 42 GitHub repos by hiding a payload too big to fail

The Register Security7h agoAppSec

LiteLLM supply chain attack started with an exposed master key

The Register Security9h agoAppSecAI

How the $2,000 php2shell Challenge Was Solved

VideoLiveOverflow10h agoAppSec

'Gheist' Weaponizes GitHub Tokens to Steal Cloud Secrets

Dark Reading11h agoAppSecCloud