Exposure of Sensitive Information to an Unauthorized Actor in Copilot Studio allows a unauthenticated attacker to view sensitive information through network attack vector
CVE-2026-21520 Copilot Studio Information Disclosure Vulnerability
Published January 23, 2026