CVE-2026-103572: Remote code execution in Visual Studio Copilot

# CVE-2026-103572: Remote code execution in Visual Studio Copilot

https://gcdradar.vercel.app/incidents/cve-2026-103572-remote-code-execution-in-visual-studio-copil · AIR-2026-0320 · closed 2026-10-27

- Lane: Patch now
- Severity: 2 (Disclosed vulnerability)
- Fix status: Fix status unknown
- First reported: 2026-10-13
- AI role: Attack on AI
- Products: Visual Studio Copilot, SQL Server Management Studio
- CVE ids: CVE-2026-103572
- CVSS: 8.8

## Summary

A path validation check bypass in Visual Studio Copilot and SQL Server Management Studio permitted arbitrary command execution. Microsoft patched this important severity remote code execution vulnerability.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2026-10-13: Visual Studio Copilot and SSMS Remote Code Execution (CVE-2026-103572) (https://embracethered.com/blog/posts/2026/visual-studio-copilot-remote-code-execution)

## Sources

- 2026-10-13 Embrace The Red: Visual Studio Copilot and SSMS Remote Code Execution (CVE-2026-103572) https://embracethered.com/blog/posts/2026/visual-studio-copilot-remote-code-execution

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.