Copilot vulnerabilities
4 known CVE vulnerabilities in Copilot, translated and rated.
- CVE-2025-59286Critical
A command injection vulnerability in Copilot allows an unauthorized attacker to disclose information over a network. It stems from improper neutralization of special elements used in commands.
- CVE-2025-59272Critical
A command injection vulnerability in Copilot allows an unauthorized attacker to perform information disclosure locally. It stems from improper neutralization of special elements used in commands.
- CVE-2025-59252Critical
A command injection vulnerability in Copilot allows an unauthorized attacker to disclose information over a network. It stems from improper neutralization of special elements used in commands.
- CVE-2025-64671High
Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to execute code locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS