Loading vulnerability…
Microsoft 365 Copilot Command Injection
CVE-2026-85885 is a command-injection vulnerability in Microsoft 365 Copilot caused by improper neutralization of special elements used in commands (CWE-77). An authorized attacker with low privileges can exploit the flaw remotely to cause command interpretation beyond the intended input boundary and elevate privileges. The issue affects an exclusively hosted Microsoft 365 Copilot service and has a CVSS v3.1 score of 9.9 (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation enables elevation of privilege with changed security scope. The CVSS assessment indicates high potential impact to confidentiality, integrity, and availability, allowing an attacker to perform actions or access resources beyond their originally authorized privileges.
If you can’t patch tonight, do this now.
No customer mitigation is required because Microsoft has already mitigated the vulnerability in the hosted service.
Patch, then assume compromise.
Microsoft has fully remediated CVE-2026-85885 in the Microsoft 365 Copilot cloud service. No customer software update, patch installation, or configuration change is required.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
9 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.