# CVE-2026-42895: Microsoft Copilot command injection

Source: https://junglewise.ai/threats/cve-2026-42895-microsoft-copilot-command-injection  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-06-19. Updated: 2026-06-21  
License: CC BY 4.0 with a link back

CVE-2026-42895 · Severity: medium · CVSS 6.5 · Published 2026-06-19

Microsoft Copilot, an AI-powered productivity tool, is affected by a security flaw that could allow an unauthorized person to tamper with data over the internet. An attacker could potentially manipulate the commands or outputs of the AI assistant, though this requires some level of user interaction. This could lead to unauthorized changes in information or the integrity of the service's operations.

Technologies: [Microsoft 365 Copilot](https://junglewise.ai/threats/technologies/365-copilot). Vendors: [Microsoft](https://junglewise.ai/threats/vendors/microsoft).

## Quick answers

**Is CVE-2026-42895 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-42895 being exploited in the wild.

**How severe is CVE-2026-42895?** Medium severity, with a CVSS score of 6.5, published 19 June 2026.

**Which products and versions are affected?** Microsoft 365 Copilot unspecified.

**Is there a fix for CVE-2026-42895?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-42895 attacked?** It is attacked over the network, in a hosted service.

**Am I affected by CVE-2026-42895?** Check whether you run Microsoft 365 Copilot at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A command injection vulnerability (CWE-77) exists in Microsoft Copilot due to improper neutralization of special elements used in commands. The vulnerability is exploitable over the network without authentication, though the CVSS vector indicates that user interaction is required (UI:R). An attacker can leverage this flaw to perform unauthorized tampering with the service. The vulnerability is classified as affecting an exclusively hosted service, suggesting the fix is managed by the provider.

## Affected products

- Microsoft Microsoft 365 Copilot unspecified

## Timeline

- 2026-06-19: disclosed
- 2026-06-19: advisory

## References

- [https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42895](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42895)

## Related threats

- [Microsoft Graphics Component stack buffer overflow](https://junglewise.ai/threats/cve-2026-85881-stack-based-buffer-overflow-in-microsoft-graphics-component)
- [Microsoft M365 Copilot command injection privilege escalation](https://junglewise.ai/threats/cve-2026-85885-improper-neutralization-of-special-elements-used-in-a-command)
- [Microsoft 365 Copilot Business Chat command injection](https://junglewise.ai/threats/cve-2026-78501-microsoft-365-copilot-business-chat-command-injection)
- [Microsoft Copilot command injection in mobile applications](https://junglewise.ai/threats/cve-2026-48561-microsoft-copilot-command-injection-in-mobile-applications)
- [Microsoft M365 Copilot open redirect privilege escalation](https://junglewise.ai/threats/cve-2026-41106-microsoft-m365-copilot-open-redirect-privilege-escalation)