A vulnerability on Microsoft 365 Copilot may have been email stolen.

A vulnerability was found on Microsoft 365 Copilot that could allow hackers to steal emails.

According to a report by the website, The Hacker News mentioned the detection of a bug on the AI Copilot for Microsoft 365 tool that allows hackers to retrieve emails, calendars, and Index files via Microsoft 365 Copilot Enterprise Search in a single click without requiring a Prompt or Password. In addition, the Exfiltration section points directly to the Microsoft domain, making the URL Filter and Anti-Phishing systems unable to intercept. The vulnerability was named SearchLeak under the code CVE-2026-42824, but the part of the danger score, or CVSS Score, was inconclusive because Microsoft gave it a very low score of 6.5, while the National Vulnerability Database gave it a high score of 7.5.

According to Microsoft's research team, this vulnerability is a command firing type vulnerability, or Command Injection, in the Parameter q section of the Copilot Enterprise Search URL. The research team from Varonis, a data security and AI systems expert, has redefined it as a Parameter-to-Prompt Injection vulnerability. Hackers can create URLs that instruct the AI to navigate the mailbox, order the Email Title, and place it secretly in the URL of the image. Trick the victim to click. The AI will then navigate the data inside the email box. Come out

There is another factor to consider in this security vulnerability: Race Condition. Copilot has a guardrail. The output block is only a normal Text, so it relies on the tempo to shoot the tag down before the Sanitization works. The output that the hacker will receive is according to the hacker's intention. In addition, the output block can be passed through the Content Control Policy or the Content Security Policy (CSP). This policy is enforced on m365.cloud.microsoft will block images from other domains, but accept images from * .bing.com. If hackers use the "Search by Image" feature to extract image data to analyze on Microsoft's servers, the CSP policy will not work. Bing can be used as an exporting agent.

In summary, this operation is that when a hacker tricks the victim into pressing the link, the Copilot will start searching for the information defined on the link. The Copilot will then create a response link in Bing's image URL to send it back. The web browser will then run Bing during the streaming. Bing will pull out the hacker's URL, allowing the hacker to read the log from that URL, such as the request for Your _ Security _ Code _ 847291 / img.png, etc.

Important information that can be stolen by hackers using this method covers a variety of types of information inside the victim's email box, such as OTP or One-Time Password, MFA or Multi-Factors Authentication, and Password Reset links. Copilot can also be accessed on Microsoft 365, such as Calendar Invite, Conference Notes, and a lot of information. It is a very dangerous vulnerability despite its relatively low seriousness rating.

# microsoftcopilot # microsoft # Trending # lemon 8 diary # freedomhack