{
 "type": "bundle",
 "id": "bundle--3ed24dd5-5ad2-51c5-96f2-5575121229c5",
 "objects": [
  {
   "type": "incident",
   "spec_version": "2.1",
   "id": "incident--10aa1bd1-d08e-53ed-b0a2-abe9e0f62355",
   "created": "2026-10-13T00:00:00.000Z",
   "modified": "2026-10-13T00:00:00.000Z",
   "name": "Visual Studio Copilot and SSMS Remote Code Execution (CVE-2026-103572)",
   "description": "A researcher reported that Copilot in Visual Studio and SQL Server Management Studio could bypass a file path validation check using a trailing dot in a filename and write to its own MCP and settings configuration files. This let a misaligned or hijacked agent escape containment and run arbitrary commands. The researcher demonstrated exploitation via indirect prompt injection against a Microsoft model, popping calc.exe in Visual Studio 2026 and running a malicious MCP server in SSMS. Microsoft classified it as an Important severity remote code execution flaw and shipped a patch.",
   "external_references": [
    {
     "source_name": "AgentDossier",
     "external_id": "TR-2026-027",
     "url": "https://sushegaad.github.io/AgentDossier/traces/tr-2026-027/"
    },
    {
     "source_name": "Embrace The Red",
     "url": "https://embracethered.com/blog/posts/2026/visual-studio-copilot-remote-code-execution/",
     "description": "Visual Studio Copilot and SSMS Remote Code Execution (CVE-2026-103572)"
    }
   ]
  },
  {
   "type": "identity",
   "spec_version": "2.1",
   "id": "identity--8fa42241-d760-5a95-9704-4af1cf0092c5",
   "created": "2026-10-13T00:00:00.000Z",
   "modified": "2026-10-13T00:00:00.000Z",
   "name": "A security researcher demonstrating third-party indirect prompt injection that hijacks the Copilot agent",
   "roles": [
    "attacker"
   ]
  },
  {
   "type": "identity",
   "spec_version": "2.1",
   "id": "identity--a7e03ac9-d794-524d-a798-7a51d7ec8275",
   "created": "2026-10-13T00:00:00.000Z",
   "modified": "2026-10-13T00:00:00.000Z",
   "name": "Microsoft Copilot in Visual Studio and SQL Server Management Studio, via the shared Microsoft.VisualStudio.Copilot.Core.dll",
   "roles": [
    "defender"
   ]
  },
  {
   "type": "attack-pattern",
   "spec_version": "2.1",
   "id": "attack-pattern--d584a80d-1954-542d-851c-6885294c7425",
   "created": "2026-10-13T00:00:00.000Z",
   "modified": "2026-10-13T00:00:00.000Z",
   "name": "TA0001 Initial Access",
   "external_references": [
    {
     "source_name": "mitre-attack",
     "external_id": "TA0001"
    }
   ]
  },
  {
   "type": "attack-pattern",
   "spec_version": "2.1",
   "id": "attack-pattern--1ce23be1-7c66-5355-8402-f3415456fb05",
   "created": "2026-10-13T00:00:00.000Z",
   "modified": "2026-10-13T00:00:00.000Z",
   "name": "TA0002 Execution",
   "external_references": [
    {
     "source_name": "mitre-attack",
     "external_id": "TA0002"
    }
   ]
  },
  {
   "type": "attack-pattern",
   "spec_version": "2.1",
   "id": "attack-pattern--f61e512d-f20e-5d6d-a616-11e542269d85",
   "created": "2026-10-13T00:00:00.000Z",
   "modified": "2026-10-13T00:00:00.000Z",
   "name": "TA0004 Privilege Escalation",
   "external_references": [
    {
     "source_name": "mitre-attack",
     "external_id": "TA0004"
    }
   ]
  },
  {
   "type": "attack-pattern",
   "spec_version": "2.1",
   "id": "attack-pattern--89d424b5-6d2c-505d-89dc-741dfdb42065",
   "created": "2026-10-13T00:00:00.000Z",
   "modified": "2026-10-13T00:00:00.000Z",
   "name": "TA0005 Defense Evasion",
   "external_references": [
    {
     "source_name": "mitre-attack",
     "external_id": "TA0005"
    }
   ]
  }
 ]
}