PulseAugur
EN
LIVE 04:17:46

Microsoft Copilot vulnerability allows prompt injection via Windows path handling

By PulseAugur Editorial · [1 sources] ·

A security vulnerability, CVE-2026-103572, has been identified in Microsoft Copilot, affecting its integration with Visual Studio and SQL Server Management Studio. The flaw stems from how Windows handles file paths, specifically by dropping trailing dots, which allowed Copilot to bypass security checks and potentially write to its own configuration files. This could enable prompt injection attacks, allowing malicious actors to execute arbitrary commands, such as launching the Windows Calculator. Microsoft has released patches for affected versions of Visual Studio and SSMS. AI

IMPACT This vulnerability highlights risks in AI agent interactions with file systems and the need for robust path handling and validation in AI tools.

RANK_REASON Security vulnerability disclosure and patch for an AI coding assistant.

Read on dev.to — MCP tag →

AI-generated summary · Google Gemini · from 1 sources. How we write summaries →

Microsoft Copilot vulnerability allows prompt injection via Windows path handling

How we ranked this

Signal score
28 / 100
Composite score across the factors below. Higher = stronger signal that this story matters right now.
Newsworthiness bucket
Tool
Security vulnerability disclosure and patch for an AI coding assistant.
Source corroboration
Single-source cluster
Only one publisher covered this so far. Single-source stories can still rank when the publisher is high-authority, but they lack cross-source corroboration.
Topics
product, safety
Editorial topic classification. Feeds into how the story surfaces on /topic/<slug> hub pages and into the per-entity coverage mix.
AI-industry relevance
High
Clearly on-topic for AI-industry coverage.
Story freshness
Breaking (< 6h)
Fresh story with cross-source coverage still developing. Ranking may shift as more sources report.

Full methodology in our editorial standards.

COVERAGE [1]

  1. dev.to — MCP tag TIER_1 English(EN) · Gabriel Anhaia ·

    A Trailing Dot Let Copilot Rewrite Its Own .mcp.json. How Windows Paths Fool Denylists

    <ul> <li> <strong>Book:</strong> <a href="https://www.amazon.com/dp/B0GX2SQ594" rel="noopener noreferrer">System Design Pocket Guide: Interviews</a> </li> <li> <strong>The series:</strong> <em>Pocket Guides for Developers</em> — 8 short books on agents, RAG, prompts, observabilit…

RELATED ENTITIES

RELATED TOPICS