Microsoft Copilot Studio vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Microsoft Copilot Studio: 2 record(s), with affected versions and fixes.
cpe:2.3:a:microsoft:copilot_studio

CVE-2026-80098 Critical · 9.3 CWE-347 Sep 3, 2026

Copilot Studio Elevation of Privilege Vulnerability

Improper verification of cryptographic signature in Copilot Studio allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-21520 High · 7.5 CWE-77 Jan 22, 2026

Copilot Studio Information Disclosure Vulnerability

Exposure of Sensitive Information to an Unauthorized Actor in Copilot Studio allows a unauthenticated attacker to view sensitive information through network attack vector