Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2026-21520

Copilot Studio Information Disclosure Vulnerability

Description

Exposure of Sensitive Information to an Unauthorized Actor in Copilot Studio allows a unauthenticated attacker to view sensitive information through network attack vector

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Microsoft Microsoft Copilot Studio

  • -affected

References