CVE Catalog
CVE-2026-59118
CriticalCVSS 9.3Exploitation Probability (EPSS)
Low risk0.39%
32th percentile - higher than 32% of all known CVEs
Summary
Improper authorization in Copilot Cowork allows an unauthorized attacker to elevate privileges over a network.
Risk Assessment
An attacker could gain elevated privileges, potentially leading to unauthorized access to sensitive data and systems.
Recommendation
Review authorization configuration in Copilot Cowork and apply appropriate patches or updates from the vendor.
Original NVD description (English source)
Improper authorization in Copilot Cowork allows an unauthorized attacker to elevate privileges over a network.