CVE-2025-59272

The flaw lies in improper neutralization of special characters interpreted as commands (command injection). An attacker, without the need for authentication and user interaction, can submit crafted input data to the Copilot component. The vulnerability is exploited locally, however the scope of the breach extends beyond the direct context of the application (Scope: Changed), which increases the potential reach of the attack.

An attacker can gain unauthorized access to sensitive information processed by Microsoft 365 Copilot Chat. According to the CVSS vector, high impact on data confidentiality is possible while having limited impact on its integrity.

Apply patches available from the vendor according to the references — detailed information about available updates is available at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59272

Microsoft 365 Copilot Chat — versions indicated in the vendor's references