Microsoft Copilot Hit With CVSS 9.6 RCE — Unauthenticated Command Injection in Enterprise AI Agent
A critical RCE in Microsoft Copilot allows unauthenticated code execution over the network. Part of a 4-CVE Patch Tuesday cluster signaling Copilot’s expanding attack surface.