A vulnerability identified as critical has been detected in Microsoft 365 Copilot. The impacted element is an unknown function. This manipulation causes command injection.
The identification of this vulnerability is CVE-2026-45497. It is possible to initiate the attack remotely. There is no exploit available.
This product is a managed service. This means that users are not able to maintain vulnerability countermeasures themselves.
