Mar 2026: M365 Copilot Information Disclosure Vulnerability
CVE-2026-26133 Published on March 13, 2026
M365 Copilot Information Disclosure Vulnerability
AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.
Products Associated with CVE-2026-26133
Want to know whenever a new CVE is published for Microsoft products? stack.watch will email you.
Affected Versions
Microsoft 365 Copilot for Android:- Version 1.0 and below 16.0.19815.10000 is affected.
- Version 1.0 and below 2.107.2 is affected.
- Version 1.0.0 and below 145.3800.99 is affected.
- Version 1.0.0.0 and below 145.3800.99 is affected.
- Version 16.0.0.0 and below 16.0.19822.20038 is affected.
- Version 1.0 and below 2.106.26020617 is affected.
- Version 2.0.0 and below 2.106.26020617 is affected.
- Version 1.0.0 and below 2.106.26020617 is affected.
- Version 16.0.1 and below 16.0.19725.20142 is affected.
- Version 1.0 and below 5.2605 is affected.
- Version 1.0.0 and below 5.2605 is affected.
- Version 1.0.0 and below 5.2605 is affected.
- Version 2.0.0 and below 2.2.260210.21290750 is affected.
- Version 1.0.0 and below 1.2.260302.2193910 is affected.
- Version 16.0.0.0 and below 16.0.19822.20038 is affected.
- Version 1.0 and below 2.106.26020617 is affected.
- Version 1.0.0 and below 1.0.0.2026043102 is affected.
- Version 2.0.0 and below 8.3.1 is affected.
- Version 16.0.0.0 and below 16.0.19822.20038 is affected.
- Version 2.0.0 and below 2.106.26020617 is affected.