CVE-2025-32711
M365 Copilot Information Disclosure Vulnerability
Ai command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- Low
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
M365 Copilot Information Disclosure Vulnerability
Ai command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.
- Record
CVE-2025-32711- CVSS 3.1
- 9.3 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C - Weakness
- CWE-74
- Updated
- 2026-11-03
EUVDEUVD-2025-18114
Ai command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.
- Record
EUVD-2025-18114- CVSS 3.1
- 9.3 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-h2w9-p5qf-qmrh
Ai command injection in M365 Copilot allows an unauthorized attacker to disclose information over...
Ai command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.
- Record
GHSA-h2w9-p5qf-qmrh- CVSS 3.1
- 9.3 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N - Weakness
- CWE-74, CWE-77
- Updated
- 2026-11-02
NVD
Ai command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.
- Record
CVE-2025-32711- CVSS 3.1
- 9.3 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N - CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-74
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| PoC in GitHub | daryllundy/cve-2025-32711 | 2025-06-27 |
| PoC in GitHub | TreRB/markdown-exfil-tester | 2026-04-20 |
| PoC in GitHub | Danielossai12/aisecplus-week01-danielossai | 2026-06-13 |
| PoC in GitHub | vikasudasi/exfil-scan | 2026-07-25 |
| PoC in GitHub | Danielle-Respes/Threat-Hunt-EchoLeak-Copilot-Prompt-Injection-Sentinel-KQL-Oct-2026 | 2026-10-18 |
History
| Recorded | Changed | Sources |
|---|---|---|
| exploits, facts | CVE List, EUVD | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-32711 is a critical vulnerability (CVSS 9.3) in Microsoft 365 Copilot, published June 11, 2025. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 7.17%, the 94th percentile. No source names a fixed version.