CVE-2025-59252

Improper neutralization of special elements used in a command 'command injection' in Copilot allows an unauthorized attacker to disclose information over a network...

CVE-2025-59252 M365 Copilot Information Disclosure Vulnerability

...

CVE-2025-59252 M365 Copilot Information Disclosure Vulnerability

...

CVE-2025-59252

CVE-2025-59252 — M365 Copilot Information Disclosure Affected product: Microsoft 365 Copilot (Copilot/spoofing context referenced across sources). Root cause: Improper neutralization of special elements used in a command (command injection) in Copilot, enabling an unauthorized attacker to disclos...