# CVE-2026-41106: Microsoft M365 Copilot open redirect privilege escalation

Source: https://junglewise.ai/threats/cve-2026-41106-microsoft-m365-copilot-open-redirect-privilege-escalation  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-07-02. Updated: 2026-07-02  
License: CC BY 4.0 with a link back

CVE-2026-41106 · Severity: critical · CVSS 9.3 · Published 2026-07-02

Microsoft 365 Copilot, an AI-powered productivity tool, contains a security flaw that allows attackers to redirect users to malicious websites. By tricking a user into clicking a specially crafted link, an attacker can gain unauthorized access to sensitive information or take over the user's session. This could lead to the theft of corporate data or unauthorized actions performed on behalf of the employee.

Technologies: [Microsoft 365 Copilot](https://junglewise.ai/threats/technologies/365-copilot). Vendors: [Microsoft](https://junglewise.ai/threats/vendors/microsoft).

## Quick answers

**Is CVE-2026-41106 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-41106 being exploited in the wild.

**How severe is CVE-2026-41106?** Critical severity, with a CVSS score of 9.3, published 2 July 2026.

**Which products and versions are affected?** Microsoft 365 Copilot All versions.

**Is there a fix for CVE-2026-41106?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-41106 attacked?** It is attacked over the network, in a hosted service.

**Am I affected by CVE-2026-41106?** Check whether you run Microsoft 365 Copilot at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

An open redirect vulnerability (CWE-601) exists in Microsoft 365 Copilot due to improper validation of user-supplied URL input. An unauthenticated remote attacker can exploit this by sending a link with a specially crafted URL to a target user. If the user clicks the link, they are redirected to an external, untrusted domain controlled by the attacker. In the context of M365 Copilot, this flaw is rated as critical because it can be leveraged to facilitate privilege escalation and the theft of sensitive session tokens or credentials. The vulnerability is tracked as CVE-2026-41106 and has a CVSS 3.1 score of 9.3.

## Affected products

- Microsoft Microsoft 365 Copilot All versions

## Timeline

- 2026-07-02: advisory: Initial advisory published by Microsoft and NVD.

## References

- [https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41106](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41106)

## Related threats

- [Microsoft Graphics Component stack buffer overflow](https://junglewise.ai/threats/cve-2026-85881-stack-based-buffer-overflow-in-microsoft-graphics-component)
- [Microsoft M365 Copilot command injection privilege escalation](https://junglewise.ai/threats/cve-2026-85885-improper-neutralization-of-special-elements-used-in-a-command)
- [Microsoft 365 Copilot Business Chat command injection](https://junglewise.ai/threats/cve-2026-78501-microsoft-365-copilot-business-chat-command-injection)
- [Microsoft Copilot command injection in mobile applications](https://junglewise.ai/threats/cve-2026-48561-microsoft-copilot-command-injection-in-mobile-applications)
- [Microsoft Copilot command injection](https://junglewise.ai/threats/cve-2026-42895-microsoft-copilot-command-injection)