Unrated severityNVD Advisory· Published Jul 2, 2026· Updated Aug 3, 2026
Microsoft 365 Copilot Elevation of Privilege Vulnerability
CVE-2026-41106
Description
Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevate privileges over a network.
Affected products
1Patches
Vulnerability mechanics
References
1- msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41106mitrevendor-advisorypatch
News mentions
0No linked articles in our index yet.