Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Improper neutralization of special elements used in a command ('command injection') in Outlook Copilot allows an authorized attacker to perform tampering over a network.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
Building Trust-Aware Controls for AI: Differentiated handling of untrusted content | Microsoft Community Hub https://techcommunity.microsoft.com/blog/microsoft-copilot-blog/building-trust-aware-controls-for-ai-differentiated-handling-of-untrusted-conten/4562160 設定方法👇 CVE-2026-55145 - Security Update Guide - Microsoft - Outlook Copilot Tampering Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55145
🪟 Outlook Copilot can be tricked into tampering with data via crafted content—because apparently “AI assistant” also means “please audit your tenant.” Moderate score, serious reminder: review access now. https://windowsforum.com/threads/cve-2026-55145-outlook-copilot-command-injection-needs-tenant-review.438760/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #CommandInjection #Microsoft365Security https://t.co/3RxvE8PNk8
Post summary
The post alerts about CVE-2026-55145, describing a command‑injection flaw in Outlook Copilot and urging tenant review, but it offers no PoC, exploit, patch, or evidence of active exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | microsoft | copilot | - | - | - |