Skip to content
Sign in
6.3 Medium

CVE-2026-55145 Improper neutralization of special elements used in a command ('command injection') in Outlook Copilot allows an…

Description

Improper neutralization of special elements used in a command ('command injection') in Outlook Copilot allows an authorized attacker to perform tampering over a network.

Affected products and versions

Product Affected versions Fixed in
Microsoft Copilot Versions not published

Other CVEs of Microsoft Copilot

The 3 CVEs of Microsoft Copilot →
CVE-2026-55946 Ai command injection in Microsoft Copilot allows an unauthorized attacker to disclose information over a network 6.1 Medium CVE-2026-26136 Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an… 6.5 Medium
Track this CVE