high7.1
CVE-2026-26133
AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.
Impact
AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | 365 Copilot | before 2.107.2 before 16.0.19815.10000 |
| Microsoft | Edge | before 145.3800.99 |
| Microsoft | Excel | before 2.106.2 before 16.0.19822.20038 |
| Microsoft | Loop | before 2.106 |
| Microsoft | Onenote | before 16.0.19725.20142 All versions |
| Microsoft | Outlook | before 5.2605.0 All versions |
| Microsoft | Power Bi | before 2.2.260210.21290750 All versions |
| Microsoft | Powerpoint | before 2.106.2 before 16.0.19822.20038 |
| Microsoft | Teams | before 1.0.0.2026043102 before 8.3.1 |
| Microsoft | Word | before 2.106.2 before 16.0.19822.20038 |