CVE-2025-32711

Published Jun 11, 2025

Last updated 7 months ago

Microsoft 365 Copilot

Chat GPT

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-32711 is a command injection vulnerability affecting Microsoft 365 Copilot. It allows an unauthorized attacker to disclose information over a network. The vulnerability, dubbed "EchoLeak," is a zero-click AI vulnerability, meaning it can be exploited without any user interaction. The attack involves embedding a malicious prompt payload within markdown-formatted content, such as an email. When the AI system's retrieval-augmented generation (RAG) engine parses this content, the payload silently triggers the LLM to extract and return private information from the user's current context. This could potentially expose sensitive data, including chat histories, OneDrive documents, SharePoint content, and Teams conversations. Microsoft has addressed this vulnerability.

Description: Ai command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.
Source: secure@microsoft.com
NVD status: Modified
CNA Tags: exclusively-hosted-service
Products: 365_copilot

Risk scores

CVSS 3.1

Type: Primary
Base score: 7.5
Impact score: 3.6
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Severity: HIGH

Weaknesses

secure@microsoft.com: CWE-74

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:microsoft:365_copilot:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "E4A390D9-7457-430A-82CC-A24DA275BF06",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.