教程 / 实战普通
A Trailing Dot Let Copilot Rewrite Its Own .mcp.json. How Windows Paths Fool Denylists
内容摘要
CVE-2026-103572: Copilot in Visual Studio blocked .mcp.json by string. The agent wrote .mcp.json. and Windows saved it as the real file.
综合分类、实体标签与信息来源匹配