Tools AI Risk Radar ai-incident-0226
Incident record
Visual Studio Copilot settings bypass enabled code execution
- Severity
- High
- Status
- Patched
- Type
- Infra Vuln
- Target
- Visual Studio and SQL Server Management Studio Copilot
- Actor
- researcher
- CVE
- CVE-2026-103572
What happened
Microsoft fixed a Copilot settings-write bypass that could turn an indirect prompt injection into code execution. Its CNA record rates the vulnerability 8.8 High.
The researcher describes untrusted content causing an agent to write settings that bypass intended restrictions. Visual Studio fixes include 17.14.42 and 18.10.4 for the affected branches. Microsoft’s title also names SQL Server Management Studio, while the published version ranges identify the two Visual Studio branches. The researcher reports receiving no bounty for this case; that outcome applies to this individual report.
Sources
- Researcher disclosureembracethered.com/blog/posts/2026/visual-studio-copilot-remo…
- Microsoft advisorymsrc.microsoft.com/update-guide/vulnerability/CVE-2026-10357…
- Assigning CNA recordcveawg.mitre.org/api/cve/CVE-2026-103572
One record from the AI Risk Radar, maintained by the Security Desk.Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 28 October 2026