Microsoft · M365 Copilot · CVE-2025-32711
**Name of the Vulnerable Software and Affected Versions**
Microsoft 365 Copilot (affected versions not specified)
**Description**
EchoLeak is a critical zero-click issue in Microsoft 365 Copilot that allows an unauthorized remote attacker to exfiltrate sensitive organizational data from OneDrive, SharePoint, and Teams without any user interaction. The attack utilizes indirect prompt injection, where a crafted email containing hidden instructions is sent to a target. When the user later queries Copilot for routine tasks, the system retrieves the malicious email into its context via Microsoft Graph and follows the instructions to gather internal data. This data is then silently exfiltrated to the attacker's server by embedding it in reference-style links or images, bypassing Content Security Policies (CSP) through a trusted Microsoft Teams proxy and utilizing ASCII smuggling. The issue stems from a lack of data sanitization at the control level and scope violations within the Retrieval-Augmented Generation (RAG) engine, which mixes untrusted inputs with internal data.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.