Microsoft 365 Copilot Command Injection Vulnerability Allowing Information Disclosure
Vulnerability
A command injection vulnerability has been identified in Microsoft 365 Copilot, which allows unauthorized attackers to disclose information over a network. This vulnerability arises from improper neutralization of special elements used in commands, enabling potential exploitation via AI commands.
Impact
Exploitation of this vulnerability could lead to unauthorized information disclosure over the network.
Added: Jun 11, 2025, 2:23 PM
Updated: Jun 11, 2025, 2:23 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
2.5exploitability
7.4remediation
0.0relevance
0.2threat
0.4urgency
2.9incentive
5.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.