Exposing Microsoft's flawed code that lets attackers access files on your server

> and argues that this incident shows how the agentic web introduces a new attack surface

Does it? This vulnerability doesn't look any different to a pre-agentic AI vulnerability.