Researchers Disclose AI-Assisted SharePoint Exploit Chain Reaching Unauthenticated RCE

Security researchers, aided by an AI agent, discovered a critical vulnerability in Microsoft SharePoint Server editions that allows unauthenticated attackers to impersonate any user and execute remote code. The exploit chain affects SharePoint Server Subscription Edition, 2019, 2016, and related products, with patches pending release. Users are advised to apply the July update to break the exploit chain and await the forthcoming August patch.