Windows path flaw vulnerability disclosed allowing Copilot configuration file overwrite
11/06/2026 — 11/06, 10:16·1 sources (all)·1 reports (all)
Key takeaways
- Security researchers have disclosed a vulnerability in Windows path handling (CVE-2026-103572) where attackers could use indirect prompt inj…
Related AI tools
- Heat index
- 93
- All sources
- 1
- All reports
- 1
- First seen
- 3 hours ago
Reports on this story headlines open the original
Security researcher Johann Rehberger disclosed a Windows path handling vulnerability (CVE-2026-103572) affecting GitHub Copilot in Visual Studio and SSMS. A trailing dot in file paths allowed malicious prompts to bypass string-matching denylists and overwrite protected .mcp.json files. Microsoft shipped a fix in the October Patch Tuesday rated Important with a CVSS score of 8.8.
DEV Community · AIAI score 71
Other stories people are talking about
- Heat index 1217SurgeOpenAI rolls out GPT-6 Cyber to Daybreak Red users with API, Codex access15 sources
- Heat index 929SurgeGemini Omni 1.2 Flash extends video clips to 30 seconds via API11 sources
- Heat index 705RisingAnthropic launches Claude Personal Finance with read-only Plaid bank links9 sources
- Heat index 630OpenAI ships Images 2.6 with GIF and SVG output14 sources
- Heat index 629RisingTencent unveils Hy4 multimodal model and announces full open-sourcing14 sources
How is heat calculated?About the methodHide
Heat counts how many independent sources covered a story in the last 48 hours: one source counts once no matter how many posts it published, decaying with a 24-hour half-life. What ranks first is what many people are talking about.
This page aggregates public feeds. Headlines and summaries are machine-organized and remain the property of the original authors; verify important facts at the source. If you believe a headline or summary infringes your rights, email the contact address in the footer with the page URL and basis of your claim, and we will remove or replace it after review.
- Surge
- Discussion rising fast
- New
- First report within 6 hours
- Rising
- Still gathering discussion