Sep 2026: Copilot Studio Elevation of Privilege Vulnerability
CVE-2026-80098 Published on September 3, 2026

Copilot Studio Elevation of Privilege Vulnerability
Improper verification of cryptographic signature in Copilot Studio allows an unauthorized attacker to elevate privileges over a network.

Vendor Advisory NVD

Vulnerability Analysis

Exploitation:

NONE

Automatable:

YES

Technical Impact:

TOTAL

Weakness Type

Improper Verification of Cryptographic Signature

The software does not verify, or incorrectly verifies, the cryptographic signature for data.

Products Associated with CVE-2026-80098

Want to know whenever a new CVE is published for Microsoft Copilot Studio? stack.watch will email you.

Microsoft Copilot Studio

Affected Versions