Improper neutralization of special elements used in a command in Microsoft Copilot creates a command‑injection flaw that permits an unauthorized attacker to cause the application to run arbitrary commands and copy sensitive data over the network. The flaw is classified as CWE‑77 and can lead to unauthorized disclosure of information.

The vulnerability applies to Microsoft Copilot. No specific version ranges are supplied, so all current releases may be affected until a patch is released.

The CVSS score of 6.5 indicates moderate severity, and the EPSS score of less than 1 % shows a low likelihood of exploitation in the wild. It is not listed in the CISA KEV catalog, suggesting no known active exploitation. The likely attack vector requires access to the Copilot interface; a local application or partner with access to the interface can supply crafted input that is not properly sanitized, enabling command execution and data exfiltration across the network. These inferences are based on the description of command injection and the stated disclosure of information.