CVE-2026-69855: Microsoft Copilot in Azure Information Disclosure Vulnerability
Published Aug 20, 2026
·Updated
Microsoft Copilot in Azure Information Disclosure Vulnerability
Other sources
Server-side request forgery (ssrf) in Microsoft Copilot in Azure allows an authorized attacker to disclose information over a network.
— Microsoft
Affected Software
1 affected component
Microsoft Copilot in Azure
Event History
Aug 20, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·02:00 PM
Description
CVE Published
via MITRE·09:47 PM
Data Sourced
via MITRE·09:47 PM
DescriptionSeverity
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The attacker must be authorized and have low-level privileges. Exploitation can be performed over a network and does not require user interaction.
2
What is the potential impact?
A successful exploit could allow disclosure of information through server-side request forgery. The provided severity vector indicates high confidentiality impact, with no stated integrity or availability impact.