Last seen December 11, 2025

Microsoft Copilot Prompt Injection Vulnerability

AI agents created using Microsoft Copilot Studio are vulnerable to prompt injection, allowing attackers to bypass internal security mandates. This exploit facilitates the unauthorized exfiltration of sensitive corporate data and enables malicious modification of information, posing a significant risk to organizations.

Technical Severity
Low severity
Lifecycle Status

STABLE

What Happened

AI agents created using Microsoft Copilot Studio are vulnerable to prompt injection, allowing attackers to bypass internal security mandates. This exploit facilitates the unauthorized exfiltration of sensitive corporate data and enables malicious modification of information, posing a significant risk to organizations.

Why This Matters

Current evidence identifies a security issue involving Microsoft Copilot, but does not yet support a more specific impact claim.

Recommended Action

No confirmed vendor remediation is available in the current evidence. Confirm whether Microsoft Copilot is present in your environment and review the affected configuration.

Exposure

My AI Stack Exposure

Exposure unknown

Recommended Response
Last Seen

Dec 11, 2025 05:30

Exposure reason: This incident does not currently match a technology in My AI Stack.

Exploitation status: UNKNOWN

Primary entities:

MicrosoftMicrosoft CopilotAI AgentsPrompt InjectionAgents LiableCopilot

Timeline

  • Incident first seen
    Dec 11, 2025 05:30

    BugSkan first recorded this incident.

  • Copilot's No Code AI Agents Liable to Leak Company Data - Dark Reading
    Dec 11, 2025 05:30

    darkreading.com · Research

Sources

Copilot's No Code AI Agents Liable to Leak Company Data - Dark Reading

darkreading.com · Dec 11, 2025 05:30

AI agents created using Microsoft Copilot Studio are vulnerable to prompt injection, allowing attackers to bypass internal security mandates. This exploit facilitates the unauthorized exfiltration of sensitive corporate data and enables malicious modification of information, posing a significant risk to organizations.

Open publisher source

My AI Stack Match

Want personalized relevance?

Create an account to see which incidents overlap with your AI stack.

← Back to incident intelligence