AI Security Agent Discovers Two Critical Microsoft Bing RCE Vulnerabilities

XBOW's autonomous offensive-security agent has identified two critical Remote Code Execution (RCE) vulnerabilities in Microsoft Bing Images. These flaws, tracked as CVE-2026-32194 (command injection via 'Search by Image' upload) and CVE-2026-32191 (OS command injection via the crawler route), are both rated CVSS 9.8 and can be exploited without authentication. This discovery highlights the increasing role of AI in identifying significant cybersecurity threats.