EUVD-2026-82582
GHSA-rq75-5hf2-vppm
Severity by source
AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N
Network-reachable and unauthenticated but gated by complex crafting (AC:H) and victim interaction (UI:R); confidentiality-only disclosure crossing a trust boundary (S:C, C:H), no I/A impact.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
3DescriptionCVE.org
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to disclose information over a network.
AnalysisAI
Command injection in Microsoft Copilot allows an attacker to disclose confidential information when a victim invokes Copilot on attacker-controlled content containing improperly neutralized special elements. Exploitation requires the victim to trigger Copilot against the malicious content (UI:R) and depends on precise crafting to defeat the assistant's neutralization logic (AC:H), so it cannot be triggered unilaterally by the attacker, though no authentication is required of the attacker (PR:N). …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation targets Microsoft Copilot and requires the victim to invoke Copilot on attacker-controlled content that contains improperly-neutralized special elements (UI:R) - the attacker cannot trigger it unilaterally. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | Real-world risk is moderate and skewed toward opportunistic data theft rather than mass exploitation. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No vendor-released patch version is identified from the available data, because Microsoft Copilot is a Microsoft-hosted service and the fix is applied server-side by the vendor rather than distributed to customers; the authoritative reference is the MSRC advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55946, and organizations should confirm current guidance and service status there. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Microsoft Copilot
View allSame weakness CWE-77 – Command Injection
View allSame technique Command Injection
View allShare
External POC / Exploit Code
Leaving vuln.today