The vulnerability of Microsoft Outlook Copilot, an intelligent virtual customer support tool for Outlook, allows a hacker to execute arbitrary commands.

The vulnerability of the intelligent virtual assistant for Microsoft Outlook Copilot is related to the lack of measures taken at the management level to clean data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

CVE-2026-55145

Improper neutralization of special elements used in a command 'command injection' in Outlook Copilot allows an authorized attacker to perform tampering over a network...

CVE-2026-55145 Outlook Copilot Tampering Vulnerability

...

CVE-2026-55145

The CVE-2026-55145 entry concerns Outlook Copilot and describes improper neutralization of special elements used in a command (command injection) that could allow an authorized attacker to tamper over a network. Connected sources corroborate with MSRC and NVD summaries and indicate exploitation s...

EUVD-2026-44226

Improper neutralization of special elements used in a command 'command injection' in Outlook Copilot allows an authorized attacker to perform tampering over a network...

CVE-2026-55145 Outlook Copilot Tampering Vulnerability

...

Outlook Copilot Tampering Vulnerability

Improper neutralization of special elements used in a command 'command injection' in Outlook Copilot allows an authorized attacker to perform tampering over a network...

KLA91149 Multiple vulnerabilities in Microsoft Copilot Plugin

Multiple vulnerabilities were found in Microsoft Copilot Plugin. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in GitHub Copilot...

PT-2026-58586

Improper neutralization of special elements used in a command 'command injection' in Outlook Copilot allows an authorized attacker to perform tampering over a network...

CVE-2026-55145: Improper Neutralization of Special Elements used in a Command

Improper neutralization of special elements used in a command 'command injection' in Outlook Copilot allows an authorized attacker to perform tampering over a network...