Critical
CVSS 9.3
Overview
Ai command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.
CVE-2025-32711
Ai command injection in M365 Copilot allows an unauthorized attacker to disclose...
Risk analysis
This vulnerability is rated 🔴 CRITICAL.
- CVSS: 9.3 (CRITICAL)
- Detected tags: command_injection, unauth_access (tag impact: HIGH)
Recommended actions:
- Enforce authentication/authorization; reduce default endpoint exposure.