Story · Johann Rehberger
From SELECT to SYSADMIN with SQL Copilot (CVE-2026-65669) (Johann Rehberger)
blog post · Story page
Critical-rated SQL Server privilege escalation through Copilot in SSMS
Appeared in
- A forged chat-template marker loses most of its authority as ordinary subwords
Oct 01, 2026 · quick links
Subscribe
Get the brief in your inbox
Pick daily, weekly, or both. Nothing is gated either way: every issue is on the site and in the feeds.
- Weekdays at 8:45am IST, one lead story and 6 to 9 items.
- Sundays, an argued synthesis rather than a recap.
- One click to leave, and quiet days say so in the subject line.