9.3 Critical

CVE-2025-32711 M365 Copilot Information Disclosure Vulnerability

Description

Ai command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.

CVSS 3.1 detail

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C

Exploitable remotely over the network, without an account and without any user action; an attacker can seriously compromise confidentiality, integrity or availability.

Attack vector: Network
Attack complexity: Low
Privileges required: None
Interaction: None
Scope: Changed
Confidentiality: High
Integrity: Low
Availability: None

Affected products and versions

Product	Affected versions	Fixed in
Microsoft 365 Copilot	Versions not published

References

M365 Copilot Information Disclosure Vulnerability msrc.microsoft.com

Timeline

Published June 11, 2025
Last modified November 3, 2026

The 14 CVEs of Microsoft 365 Copilot →

CVE-2026-85887 Incorrect permission assignment for critical resource in M365 Copilot allows an authorized attacker to disclose… 7.7 High CVE-2026-85885 Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an authorized… 9.9 Critical CVE-2026-50517 Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network 9.9 Critical CVE-2026-41106 Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevate… 9.3 Critical

Track this CVE