# CVE-2026-85885: Microsoft M365 Copilot command injection privilege escalation

Source: https://junglewise.ai/threats/cve-2026-85885-improper-neutralization-of-special-elements-used-in-a-command  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-17. Updated: 2026-09-26  
License: CC BY 4.0 with a link back

CVE-2026-85885 · Severity: critical · CVSS 9.9 · Published 2026-09-17

Microsoft M365 Copilot, an AI assistant integrated into Microsoft 365 productivity applications, contains a command injection vulnerability that allows authorized users to execute arbitrary commands and escalate their privileges. An attacker with valid credentials could exploit this flaw to gain elevated access within the M365 environment, potentially compromising sensitive organizational data and systems.

Technologies: [Microsoft 365 Copilot](https://junglewise.ai/threats/technologies/365-copilot), [Microsoft M365 Copilot](https://junglewise.ai/threats/technologies/m365-copilot). Vendors: [Microsoft](https://junglewise.ai/threats/vendors/microsoft).

## Quick answers

**Is CVE-2026-85885 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-85885 being exploited in the wild.

**How severe is CVE-2026-85885?** Critical severity, with a CVSS score of 9.9, published 17 September 2026.

**Which products and versions are affected?** Microsoft M365 Copilot.

**Is there a fix for CVE-2026-85885?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-85885 attacked?** It is attacked over the network.

**Am I affected by CVE-2026-85885?** Check whether you run Microsoft 365 Copilot or Microsoft M365 Copilot. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A command injection vulnerability in M365 Copilot fails to properly neutralize special elements in user-supplied input, allowing authenticated attackers to inject and execute arbitrary system commands. The vulnerability can be exploited over the network by an authorized user to escalate privileges beyond their normal account permissions. A patch from Microsoft is expected to address this issue.

## Affected products

- Microsoft M365 Copilot

## Timeline

- 2026-09-17: disclosed

## References

- [https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85885](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85885)

## Related threats

- [Microsoft Graphics Component stack buffer overflow](https://junglewise.ai/threats/cve-2026-85881-stack-based-buffer-overflow-in-microsoft-graphics-component)
- [Microsoft M365 Copilot incorrect permission assignment in critical resource](https://junglewise.ai/threats/cve-2026-85887-microsoft-m365-copilot-incorrect-permission-assignment-in)
- [Microsoft 365 Copilot Business Chat command injection](https://junglewise.ai/threats/cve-2026-78501-microsoft-365-copilot-business-chat-command-injection)
- [Microsoft Copilot command injection in mobile applications](https://junglewise.ai/threats/cve-2026-48561-microsoft-copilot-command-injection-in-mobile-applications)
- [Microsoft M365 Copilot open redirect privilege escalation](https://junglewise.ai/threats/cve-2026-41106-microsoft-m365-copilot-open-redirect-privilege-escalation)