Microsoft Copilot Command Injection Vulnerability Allowing Information Disclosure
Vulnerability
A command injection vulnerability has been identified in Microsoft Copilot, allowing unauthorized attackers to disclose information over a network. This issue arises from improper neutralization of special elements used in commands.
Impact
Exploitation of this vulnerability could lead to unauthorized information disclosure over the network.
Added: Mar 19, 2026, 9:43 PM
Updated: Mar 19, 2026, 9:43 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
2.5exploitability
6.2remediation
0.0relevance
4.1threat
0.0urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.