The vulnerability predates Copilot. Paint's first vulnerable version (11.0) was released September 2021, Copilot in February 2023.