CVE-2026-24301

Microsoft Copilot is vulnerable to command injection due to improper neutralization of special elements, enabling unauthorized attackers to potentially disclose sensitive information over a network. Organizations utilizing Microsoft Copilot should prioritize addressing this vulnerability to mitigate the risk of data exposure and maintain the integrity of their systems. Immediate action is recommended for environments where sensitive data is processed or stored.