Skip to content
CodeAuditAgent

CVE-2026-85887

Incorrect permission assignment for critical resource in M365 Copilot allows an authorized attacker to disclose information over a network.

Weakness

Incorrect permission assignment for critical resource in M365 Copilot allows an authorized attacker to disclose information over a network.

References

Find the bug before an attacker does.

Sign in with GitHub and run your first audit in under a minute. The free plan needs no credit card.