Microsoft patched a Copilot Studio prompt injection. The data exfiltrated anyway
Microsoft Addresses CVE-2026-21520 Vulnerability in Copilot Studio Microsoft has identified and addressed CVE-2026-21520, a CVSS 7.5 indirect prompt injection vulnerability in Copilot Studio. The flaw was discovered by Capsule Security and disclosed to Microsoft, leading to a patch deployment on …
Microsoft patched a Copilot Studio prompt injection. The data exfiltrated anyway Read More »










