CVE-2026-59118: Copilot Cowork Elevation of Privilege Vulnerability
Published Aug 6, 2026
·Updated
Copilot Cowork Elevation of Privilege Vulnerability
Other sources
Improper authorization in Copilot Cowork allows an unauthorized attacker to elevate privileges over a network.
— NVD
Affected Software
3 affected components
Microsoft Power Apps
Microsoft Power Apps
Microsoft Copilot Cowork
Event History
Aug 6, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·02:00 PM
Description
Updated
via Microsoft·02:00 PM
Affected Software
CVE Published
via MITRE·10:37 PM
Data Sourced
via MITRE·10:37 PM
DescriptionSeverity
Aug 7, 2026
Data Sourced
via NVD·12:16 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-59118?
CVE-2026-59118 has a critical severity rating of 9.3.
2
What vulnerability type is CVE-2026-59118?
CVE-2026-59118 is categorized as an elevation of privilege vulnerability.
3
How does CVE-2026-59118 affect Microsoft Power Apps?
CVE-2026-59118 allows an unauthorized attacker to elevate privileges in Microsoft Power Apps over a network.
4
What are the potential impacts of CVE-2026-59118?
The impact of CVE-2026-59118 includes unauthorized access to elevated privileges, leading to potential data exposure.
5
How can I mitigate the risk of CVE-2026-59118?
To mitigate the risk of CVE-2026-59118, ensure you apply the latest security patches and monitor for unauthorized access.