What happened
Microsoft published CVE-2026-103572 (2026-10-13) as an improper-control-of-code-generation flaw in Visual Studio Tools for Applications and SSMS. Security digest coverage dated 2026-10-18 described the real-world exploitation chain as indirect prompt injection plus a path-validation quirk yielding arbitrary code execution. CVSS 8.8 HIGH, CWE-94, SSVC exploitation=none / technicalImpact=total.
Why it matters
This is a prompt-injection-to-RCE path inside a mainstream AI-assisted developer tool. Untrusted content that reaches the coding assistant can be escalated to code execution on the developer's or build machine — the same machine that holds the cloud, VCS, and npm credentials an AI coding agent commonly uses.
Attack vector
Improper control of code generation ('code injection', CWE-94) in Visual Studio Tools for Applications and SQL Server Management Studio. A machine-generated (Copilot/AI-assisted) code path or an indirect prompt-injected AI input combined with a path-validation quirk leads to arbitrary code execution over the network (CVSS 8.8, HIGH, UI:R, AV:N).
Affected systems
Microsoft Visual Studio 2022 version 17.14 (< 17.14.42); Microsoft Visual Studio 2026 version 18.10 (< 18.10.4)
Mitigation
Apply the October 2026 Microsoft updates (VS 2022 >= 17.14.42, VS 2026 >= 18.10.4).