on July 2, 2026 at 2:00 pm — CVE-2026-41106 Microsoft 365 Copilot Elevation of Privilege Vulnerability

Written by Privacy Trust July 2, 2026

Url redirection to untrusted site (‘open redirect’) in M365 Copilot allows an unauthorized attacker to elevate privileges over a network.

Related Blog