CVE-2026-55145: Outlook Copilot Tampering Vulnerability
Published Jul 14, 2026
·Updated
Improper neutralization of special elements used in a command ('command injection') in Outlook Copilot allows an authorized attacker to perform tampering over a network.
Affected Software
3 affected components
Microsoft Outlook Copilot
Microsoft Copilot
Microsoft Copilot
Event History
Jul 14, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·02:00 PM
Affected Software
Updated
via Microsoft·02:00 PM
Description
CVE Published
via MITRE·05:09 PM
Data Sourced
via MITRE·05:09 PM
DescriptionSeverity
Data Sourced
via NVD·06:18 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-55145?
CVE-2026-55145 has a severity rating of 7.1, which is classified as high.
2
What is CVE-2026-55145?
CVE-2026-55145 is an Outlook Copilot Tampering Vulnerability that allows an authorized attacker to perform command injection.
3
What impact does CVE-2026-55145 have on users?
The vulnerability can lead to unauthorized tampering over a network impacting command execution permissions.
4
How do I fix CVE-2026-55145?
To mitigate CVE-2026-55145, users should apply the latest security updates provided by Microsoft.
5
Which software is affected by CVE-2026-55145?
CVE-2026-55145 affects Microsoft Copilot and Microsoft Outlook Copilot.