CVE-2026-55946 Ai command injection in Microsoft Copilot allows an unauthorized attacker to disclose information over a network

Description

Ai command injection in Microsoft Copilot allows an unauthorized attacker to disclose information over a network.

Affected products and versions

Product	Affected versions	Fixed in
Microsoft Copilot	Versions not published

Other CVEs of Microsoft Copilot

The 3 CVEs of Microsoft Copilot →

CVE-2026-55145 Improper neutralization of special elements used in a command ('command injection') in Outlook Copilot allows an… 6.3 Medium CVE-2026-26136 Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an… 6.5 Medium