CVE-2026-41106
CriticalCVSS 9.3Exploitation Probability (EPSS)
Low risk42th percentile - higher than 42% of all known CVEs
Summary
An open redirect vulnerability in M365 Copilot allows an unauthorized attacker to redirect users to a malicious site, potentially leading to privilege escalation over a network.
Risk Assessment
An attacker could exploit this redirect to steal credentials or conduct a phishing attack, posing a risk to organizational security.
Recommendation
Apply the security update provided by Microsoft for M365 Copilot immediately and consider implementing URL validation mechanisms.
Other vulnerabilities in M365 Copilot
See all- CVE-2026-42893High
M365 Copilot has improper neutralization of special elements used in commands, leading to a 'command injection' vulnerability. This allows an unauthorized attacker to perform tampering over a network.
- CVE-2026-85885Critical
Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an authorized attacker to elevate privileges over a network.
- CVE-2026-50517Critical
Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network.
- CVE-2026-54130Critical
Missing authentication for critical function in M365 Copilot allows an unauthorized attacker to disclose information over a network.
- CVE-2026-42824Medium
A command injection vulnerability in M365 Copilot allows an unauthorized attacker to disclose information over a network.
- CVE-2026-85887High
Incorrect permission assignment for critical resource in M365 Copilot allows an authorized attacker to disclose information over a network.
- CVE-2026-42827Medium
In M365 Copilot, a command injection vulnerability exists due to improper neutralization of special elements used in a command. An unauthorized attacker can disclose information over a network.
Original NVD description (English source)
Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevate privileges over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS