Topic

Cve 2026 103572

Coverage tagged cve 2026 103572.

Articles: 1
Desk: 1

Data graphic: a dark cover with a large 8.8 for the CVSS 3.1 score, rated Important. CVE-2026-103572: a trailing dot on .mcp.json. slipped past Copilot's protected-file check in Visual Studio. Fixed in 17.14.42 and 18.10.4; MSRC lists it as not exploited.

elevatedAI Security Cve 2026 103572

Microsoft Patches Copilot Prompt-Injection RCE in Visual Studio and SSMS (CVE-2026-103572)

Microsoft's October 13 patch fixes CVE-2026-103572: a trailing-dot filename let Copilot prompt injection overwrite .mcp.json in Visual Studio. CVSS 8.8, not exploited.

Oct 15 · 6 min