Security researchers, utilizing an AI agent, discovered an unauthenticated remote code execution (RCE) exploit chain in Microsoft SharePoint, tracked as CVE-2026-55040 (CVSS 9.1). This flaw allows attackers to gain administrative access without valid credentials. The discovery highlights AI’s growing role in vulnerability research and the critical need for robust SharePoint security.