8.8High
CVE-2026-47645Microsoft 365 Copilot's Business Chat Elevation of Privilege Vulnerability
Description
Url redirection to untrusted site ('open redirect') in Microsoft 365 Copilot's Business Chat allows an unauthorized attacker to elevate privileges over a network.
Weakness (CWE):
CWE-601
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| microsoft | 365 copilot | - – | |
| Microsoft | Microsoft 365 Copilot | - |
References and patches
- Microsoft 365 Copilot's Business Chat Elevation of Privilege Vulnerability vendor-advisorypatchVendor Advisory
CPE matches (NVD) (1)
cpe:2.3:a:microsoft:365_copilot:-:*:*:*:*:*:*:*