Evidence · DiggingBeagle record
Visual Studio Copilot and SSMS RCE via trailing-dot protected-file alias, CVE-2026-103572
First-hand report explaining Windows trailing-dot path canonicalization, agent writes to MCP and IDE configuration, controlled command execution, and patch observations.
- Published
- Oct 13, 2026
- Source role
- primary disclosure
Evidence record
First-hand report explaining Windows trailing-dot path canonicalization, agent writes to MCP and IDE configuration, controlled command execution, and patch observations.
Claim-level citations (2)
- supportsVisual Studio Copilot protected-file checks could be bypassed using trailing-dot names: A Windows path ending in a dot bypassed Copilot file-edit protected-name checks while resolving to the actual sensitive settings file during write.
The Root Cause: A File Path Validation Bypass; Spot the Defect
- supportsVisual Studio Copilot protected-file checks could be bypassed using trailing-dot names: The researcher demonstrated indirect-prompt-injection command execution via MCP config and a Visual Studio ripgrep setting; Microsoft issued an October 13 patch.
Attack Chains and Exploit Demos; Analyzing the Fix