Loading vulnerability…
CVE-2026-24301 is a critical command injection and information disclosure vulnerability affecting Microsoft Copilot Personal, also described as Copilot Web. The issue stems from improper neutralization of special elements used in a command, enabling attacker-supplied prompt content to be executed within a victim’s authenticated Copilot session. Reported exploitation involved a crafted Copilot URL that combined a normal query parameter with an undocumented autorun behavior so that, after a victim clicked the link, the embedded prompt executed automatically on page load without further confirmation. The injected prompt then operated with the same effective capabilities as a user-issued Copilot instruction and could access data from services the victim had already connected and authorized for Copilot, including mail, calendar, cloud storage, chat history, and Copilot memory. The attack chain also leveraged Copilot’s built-in URL retrieval capability to transmit retrieved data outward in a way that resembled ordinary Copilot traffic. Microsoft classified the issue as an information disclosure vulnerability and remediated it in the hosted service.
Mallory correlates every CVE against your assets, your vendors, and active adversary campaigns. Know which vulnerabilities matter for you, not just which ones are loud.
What it means. What to do now. Patch path, mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
If you can’t patch tonight, do this now.
Patch, then assume compromise.
No public exploits tracked yet. Mallory keeps watching.
No public exploit code observed for this vulnerability.
8 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
A critical vulnerability in Microsoft Copilot Personal that enables silent data exfiltration from a victim’s connected accounts via a malicious link, using auto-executed prompts, Copilot access to linked apps, outbound URL fetching, and persistent memory poisoning.
An information disclosure vulnerability in Microsoft Copilot Personal, referred to as CoSnitch, that allowed attackers to socially engineer Copilot into revealing architectural details and leverage crafted URL parameters for automatic prompt execution, data exfiltration, and memory poisoning.
A set of vulnerabilities in Microsoft Copilot Personal that can enable one-click prompt execution, data exfiltration from already-connected services, and persistent malicious memory writes via web summarization.
A command injection vulnerability in Microsoft Copilot Web that allows an unauthorized attacker to disclose information over a network.
Query your assets running an affected version, and investigate the blast radius.
Every observed campaign linking this CVE to a named adversary.
Malware families riding this exploit, with evidence and IOCs.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Cross-references every affected SKU, including bundled OEM variants.
Community discussion across Reddit, Mastodon, and other social sources.