Researchers Disclose AI-Assisted SharePoint Exploit Chain Reaching Unauthenticated RCE

Security researchers have discovered a method to gain unauthorized access to Microsoft SharePoint servers, allowing them to enter as any user, including administrators, without a valid account. This was achieved in part with the help of an AI agent. The vulnerability affects several versions of SharePoint Server, including Subscription Edition, 2019, and 2016, and is tracked as a high-severity flaw. Microsoft is aware of the issue. The vulnerability has a CVSS score of 9.1, indicating a significant level of severity.