Vulnerability
Copilot's read-only mode in SSMS can be bypassed to run arbitrary T/SQL.
The flaw carries the identifier CVE-2026-65669, a privilege escalation that Microsoft classifies as critical.
Copilot runs its queries with the privileges of the connected user, including sysadmin.
Via a malicious constitution planted by a db_owner, a demo adds the attacker to the sysadmin role.