Skip to content
RCE Vulnerability in Visual Studio Copilot and SSMS Exploited via Trailing Dot

RCE Vulnerability in Visual Studio Copilot and SSMS Exploited via Trailing Dot

First seen 14 Oct 2026, 04:07 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 14, 2026 at 05:06 UTC
  • •CVE-2026-103572 allows RCE via a trailing dot in filenames.
  • •Microsoft patched the vulnerability on October 13, 2026.
  • •No bounty was awarded to the researcher despite confirming the flaw.

A Remote Code Execution vulnerability (CVE-2026-103572, CVSS 8.8) was discovered in Microsoft Visual Studio Copilot and SQL Server Management Studio, allowing attackers to bypass security controls using a trailing dot in filenames. The flaw, reported in August 2026, arises from a path validation bypass that enables arbitrary command execution. Microsoft released a patch on October 13, 2026, to address the issue. The vulnerability allows an attacker to manipulate Copilot's AI model, leading to potential exploitation through indirect prompt injection. Despite confirming the vulnerability, Microsoft awarded no bounty to the researcher, marking the third unrewarded report in two months. Developers are advised to patch their systems promptly to mitigate risks associated with this vulnerability.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-08-01
Vulnerability reported
A researcher disclosed the RCE vulnerability in Visual Studio Copilot and SSMS.
Daily.Dev
2026-10-13
Patch released
Microsoft released a patch for CVE-2026-103572 as part of Patch Tuesday.
Daily.Dev
2026-10-13
CVE-2026-103572 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE

More articles in this cluster (2)

Following this threat?

Track Microsoft and CVE-2026-103572 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (10)

1 / 4

Common questions

What systems are affected?
The vulnerability affects Microsoft Visual Studio Copilot and SQL Server Management Studio.
What is the nature of the vulnerability?
It is a Remote Code Execution vulnerability due to a path validation bypass.
How urgent is it to apply the patch?
It is critical to apply the patch immediately to mitigate the risk of exploitation.