AIQB
TutorialsOrdinary

A Trailing Dot Let Copilot Rewrite Its Own .mcp.json. How Windows Paths Fool Denylists

Source: DEV Community·

Summary

CVE-2026-103572: Copilot in Visual Studio blocked .mcp.json by string. The agent wrote .mcp.json. and Windows saved it as the real file.
CategoryAI Tutorials & Practice
TierOrdinary
Published
Indexed by AIQB
SourceDEV Community
AIQB record IDintel-c0d930f6f2004f714ddb6995
Read original source ↗More Tutorials

Related stories

Matched by category, entity tags and source

TutorialsOrdinary
An AI Testing Presentation Became the Final Push for Organizational Change at My Company
From a multi-agent testing experiment to a broader discussion about how engineering teams should...
Source: DEV Community
TutorialsOrdinary
Give Your Coding Agent a Bundle Budget: size-limit Fails the Branch Before You Land It
Agents add a whole library to use one function. Put a size-limit budget on each entry point, gate the push and CI, and hand the failure back to the agent.
Source: DEV Community
TutorialsOrdinary
I built a tree format for LLM code edits. Against a fair baseline, it only wins where structure matters
When an LLM edits code, it usually works on text: it rewrites the file, or it finds a string and...
Source: DEV Community
TutorialsOrdinary
Five ways real MCP clients broke our server
An agent once told one of our users that our MCP tools "cannot create projects" and asked them to...
Source: DEV Community
TutorialsOrdinary
What a Claude Code plugin runs before you type: we read 2,688 public plugins
Before you install a Claude Code plugin, open three things in its folder: hooks/hooks.json, .mcp.json...
Source: DEV Community · Claude
TutorialsOrdinary
When a Self-Hosted Model Gateway Tripped Trust & Safety
A post-mortem of consolidating subscription seats behind one OpenAI-compatible gateway: the OAuth client boundary that was crossed, the cluster block that followed, and the task-dispatch architecture that replaced it.
Source: DEV Community · OpenAI
TutorialsOrdinary
How I Automated 3D Game Assets with FLUX, Blender and the Roblox API
The problem I build Roblox games on my own, and good-looking 3D models were always my...
Source: DEV Community
TutorialsOrdinary
IA Jurídica: o que aprendi analisando 10 falhas de um assistente para contratos na minha pós-graduação
Fala, pessoal! Recentemente, desenvolvi um trabalho para a minha pós-graduação com um tema que vem...
Source: DEV Community
TutorialsOrdinary
Will AI Make Abstractions Obsolete?
As AI agents become increasingly capable, I've noticed a growing number of discussions questioning...
Source: DEV Community
TutorialsOrdinary
Before you open Claude Code in a cloned repo, check its .claude/skills folder
Before you open Claude Code in a repo you cloned, look inside its .claude/skills/ folder. Read the...
Source: DEV Community · Claude