Microsoft 365 Copilot
0 remedies
0 remedies
Microsoft 365 Copilot Command Injection Vulnerability Allowing Information Disclosure
Vulnerability
A command injection vulnerability has been identified in Microsoft 365 Copilot, allowing unauthorized attackers to disclose information over a network. This issue arises from improper neutralization of special elements used in commands.
Impact
Exploitation of this vulnerability could lead to unauthorized information disclosure over the network.
Added: May 26, 2026, 2:03 PM
Updated: May 26, 2026, 2:03 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
2.5exploitability
6.2remediation
0.0relevance
9.1threat
0.0urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.