CVE-2026-26133

Published: Mar 16, 2026Modified: Jun 17, 2026

7.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N

Exploitability: 2.8 / Impact: 4.2

Source: secure@microsoft.com (Secondary)

Description

AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.

Affected (20)

Products: Microsoft: 365 Copilot, Edge, Excel, Loop, Onenote, Outlook, Power Bi, Powerpoint, Teams, Word

10 products

Configuration A

20 vulnerable

Vulnerable Software	Affected Versions
Microsoft 365 Copilot	Before 16.0.19815.10000
Microsoft 365 Copilot	Before 2.107.2
Microsoft Edge	Before 145.3800.99
Microsoft Edge	Before 145.3800.99
Microsoft Excel	Before 16.0.19822.20038
Microsoft Excel	Before 2.106.2
Microsoft Loop	Before 2.106
Microsoft Onenote	Before 16.0.19725.20142
Microsoft Onenote	All versions
Microsoft Outlook	Before 5.2605.0
Microsoft Outlook	Before 5.2605.0
Microsoft Outlook	All versions
Microsoft Power Bi	Before 2.2.260210.21290750
Microsoft Power Bi	All versions
Microsoft Powerpoint	Before 16.0.19822.20038
Microsoft Powerpoint	Before 2.106.2
Microsoft Teams	Before 1.0.0.2026043102
Microsoft Teams	Before 8.3.1
Microsoft Word	Before 16.0.19822.20038
Microsoft Word	Before 2.106.2

Related CWEs

Improper Neutralization of Special Elements used in a Command ('Command Injection')

The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

References (1)

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26133

Source: secure@microsoft.com

Vendor Advisory

Timeline

No history available yet.