CVE-2026-103572

Name of the Vulnerable Software and Affected Versions Visual Studio Tools for Applications (affected versions not specified) SQL Server Management Studio (affected versions not specified) Visual Studio Copilot extension (affected versions not specified)

Description Improper control of code generation allows an unauthorized attacker to execute arbitrary code over a network. The issue exists in the context-gathering pipeline of the Visual Studio Copilot extension and its integration with SQL Server Management Studio, rather than within the Large Language Model (LLM) itself. An attacker can trigger remote code execution by injecting a specially crafted file path containing a dot (.) into the workspace, which is then processed by Copilot. This execution occurs within the context of the developer's IDE session, potentially granting access to credentials, source code, and build pipelines.

Recommendations Apply the latest patches for Visual Studio and SQL Server Management Studio. Restrict Copilot access to trusted repositories only. Disable automatic context loading from untrusted sources. Review IDE extension permissions. Implement network segmentation for development environments.