Critical server-side vulnerability in Microsoft Copilot Studio gives illegal access to internal infrastructure

The attack technique involves redirecting requests to the IMDS, enabling the retrieval of managed identity access tokens.

2024-09-05