Microsoft Security Response Center Follow CVE-2026-41106 Microsoft 365 Copilot Elevation of Privilege Vulnerability Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevate privileges over a network. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41106 msrc.microsoft.com
