Johann Rehberger on X: "A . is all you need! RCE in Copilot for Visual Studio and SSMS ...

X • October 14, 2026

Johann Rehberger @wunderwuzzi23 A . is all you need! 🔥 RCE in Copilot for Visual Studio and SSMS. A trailing dot added to a config filename bypasses Copilot's security controls, leading to remote code execution in Visual Studio and SQL Server Management Studio. Visual Studio Copilot Remote Code Execution (CVE-2026-103572) From embracethered.com 1:59 AM · Oct 14, 2026 · 792 Views 2

Johann Rehberger @wunderwuzzi23 1h It's exploitable by a hijacked (e.g indirect prompt injection), or otherwise misaligned, agent. Patch came out today. Trust No AI.

AI Quanting @AIQuanting 1h A single trailing dot. Someone's filename check was doing an exact string match on a Windows path, I'm guessing?

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

RCE Vulnerability in Visual Studio Copilot and SSMS Exploited via Trailing Dot A Remote Code Execution vulnerability (CVE-2026-103572, CVSS 8.8) was discovered in Microsoft Visual Studio Copilot and SQL Server Management Studio, allowing attackers to bypass security controls using a trailing dot in filenames. The flaw, reported in August 2026, arises from a path validation bypass that enables arbitrary command execution. Microsoft released a patch on October 13, 2026, to address the issue. The vulnerability allows an attacker to manipulate Copilot's AI model, leading to potential exploitation through indirect prompt injection. Despite confirming the vulnerability, Microsoft awarded no bounty to the researcher, marking the third unrewarded report in two months. Developers are advised to patch their systems promptly to mitigate risks associated with this vulnerability. 2 sources 58

Extracted Entities

Johann Rehberger on X: "A . is all you need! RCE in Copilot for Visual Studio and SSMS ...

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Domains (1)

MITRE ATT&CK (1)

Platforms (2)

Tools (1)