#microsoft

Microsoft Copilot Cowork: Prompt Injection Exfiltrates M365 Files

A 5-line poisoned Skills script silently exfiltrates SharePoint data via Copilot Cowork — no approval gate, no CVE, no patch.

Creeta

May 30, 2026