The vulnerability arises from improper neutralization of special elements in user‑supplied commands, allowing command injection in the Microsoft Copilot service. This flaw enables an attacker to inject arbitrary commands that the Copilot backend executes, resulting in unintended disclosure of sensitive information or system state over the network. The weakness is a classic command injection defect classified as CWE‑77 and leads to loss of confidentiality for data processed by the affected service.

All Microsoft Copilot deployments are affected until they apply the Microsoft patch. The CVE notes no specific version numbers, so every currently supported release should be considered at risk. Administrators should verify that their system is running a version that has received the patch and upgrade if necessary.

The CVSS score of 6.1 indicates moderate severity, while the EPSS score of less than 1 % shows a low probability of exploitation at the time of analysis. It is inferred from the description that the likely attack vector is remote, via a crafted command sent over the network to the Copilot backend. Because the vulnerability is not yet listed in CISA KEV, there is no evidence of active exploitation, but the combination of moderate severity, low exploitation likelihood, and remote applicability suggests a moderate risk that warrants timely mitigation to prevent data leakage.