CoPilot vulnerability