CVE-2026-24301

Name of the Vulnerable Software and Affected Versions Microsoft Copilot (affected versions not specified)

Description Improper neutralization of special elements used in a command allows an unauthorized attacker to disclose information over a network. This issue, referred to as CoSnitch, involves a chain of flaws that can be exploited through a technique called meta-hacking, where the model is manipulated into revealing its own internal guardrails. Attackers can use malicious URLs containing the autorun parameter to execute prompts automatically upon being clicked. Furthermore, the system is susceptible to indirect prompt injection via persistent memory poisoning through web summarization, where instructions injected into the victim's permanent memory store persist despite password changes or session revocations. This allows for the exfiltration of sensitive data from connected applications such as Gmail, Drive, and Calendar.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.