Description
Exposure of Sensitive Information to an Unauthorized Actor in Copilot Studio allows a unauthenticated attacker to view sensitive information through network attack vector
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Microsoft Copilot Studio | - | — |
Advisories 2
- WID-SEC-2026-0228 Microsoft Copilot Studio: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Jan 27, 2026
- MSRC-CVE-2026-21520 Copilot Studio Information Disclosure Vulnerability Microsoft Security Response Center · Jan 22, 2026
References
- Copilot Studio Information Disclosure Vulnerability vendor-advisory patch