2026-10-16T11:42:22Z https://njump.me Embrace The Red (Unofficial) https://njump.me/npub1vfc6kedlh39kd4e65wz7yfrrc9dxyd0a5twsmww32d68mg8jdsvq5rxhvf https://cdn.jsdelivr.net/gh/twitter/twemoji@14.0.2/assets/72x72/26be.png https://cdn.jsdelivr.net/gh/twitter/twemoji@14.0.2/assets/72x72/26be.png https://njump.me/nevent1qqsxhrnv5dv573hsfxwx80d9c6dvzy0kneq0408fyrh9nxd77399p9czyp38r2m9h77ykekh823ctc3yv0q45c34lk3d6rde69fhgldq7fkps67asuz Visual Studio Copilot and SSMS Remote Code Execution (CVE-2026-103572)<br/><br/>A . is all you need!<br/>Today Microsoft shipped the patch for a vulnerability in Visual Studio Copilot that I reported in August. Microsoft classified it as Important severity Remote Code Execution vulnerability.<br/>At the root cause it allows Copilot in Visual Studio or SQL Server Management Studio to bypass a path validation check and write to its own settings and configuration files. This allows Copilot to escape containment restrictions and achieve arbitrary command execution.<br/><br/><a href="https://embracethered.com/blog/posts/2026/visual-studio-copilot-remote-code-execution/">https://embracethered.com/blog/posts/2026/visual-studio-copilot-remote-code-execution/</a><br/> <img src="https://embracethered.com/blog/images/2026/sqlcopilot/copilot-vs-rce.png"> 2026-10-16T03:17:12Z