Skip to content
MicrosoftCVE-2026-55946

Microsoft Copilot: command injection

Medium6.1CVE-2026-55946 · Published Sep 17, 2026 · updated Sep 25, 2026

Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to disclose information over a network.

Microsoft advisory

Affected versions

PackageAffectedFixed in
Microsoft Copilot
Product
all versionsNo fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-77

More Microsoft advisories

All Microsoft
Advisory
Microsoft 365 Copilot: command injection
Critical9.9Sep 17
Microsoft Azure AI Foundry: missing authentication
Critical10.0Sep 17
Microsoft Azure AI Foundry: server-side request forgery
High7.5Sep 17
Microsoft Azure Cosmos DB: privilege escalation
Critical9.6Sep 17
Microsoft Azure Logic Apps: improper access control
Critical10.0Sep 17
Microsoft 365 Copilot's Business Chat: command injection
High7.4Sep 17

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.