CVE-2026-48561

Microsoft Edge Copilot Remote Code Execution Vulnerability

No known exploitation. EPSS puts it in the 57th percentile. A vendor fix is available.

CVSS 3.19.6Critical EPSS percentile57th0.9% chance in 30 days CISA KEVNot listedNo confirmed exploitation
No public exploit known FixVendor fixNo build named by the sources

Published 2026-07-14Updated 2026-07-26Sources: CVE.org, NVD

NVD CVE.org

What to do

The vendor has published a fix. Version details are below where the sources state them.

Steps

Written by AI from the record

Check whether you (or staff) use Microsoft 365 Copilot on mobile devices running the Copilot Android or iOS apps.
Update Microsoft 365 Copilot for Android and Microsoft 365 Copilot for iOS to the latest version available in your app store, since fixes are available in the published releases.
Until updated, treat unexpected Copilot prompts, links, or files you didn’t request as suspicious and avoid interacting with them.

Usually a quick update

Is your organisation exposed?Request an assessment to establish which checks fit your systems.

What it is

From the CVE record

Improper neutralization of special elements used in a command ('command injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to execute code over a network.

In plain language

Written by AI from the record

Microsoft 365 Copilot for Android and iOS have a serious command-injection weakness that could let an attacker run code if they trick a user into interacting with a malicious Copilot input; you should update promptly if you use Copilot on mobile.

CVE-2026-48561 is a command-injection (CWE-77) flaw in Microsoft 365 Copilot for Android and Microsoft 365 Copilot for iOS that allows network attackers to trigger remote code execution via malicious input when user interaction occurs (no authentication required).

If you're affected

Remote code execution on device
Complete account/session compromise
Data theft from mobile device
Service disruption on employee devices

What is it

This bug is like a “shortcut” that lets untrusted text be interpreted as instructions instead of harmless suggestions. If someone tricks a user into clicking or submitting a malicious prompt inside Copilot, it could lead to code running on the user’s device. In practice, it turns a normal chat interaction into something attackers can potentially control.

Who is affected

This matters if your business uses Microsoft 365 Copilot on phones and tablets, specifically Microsoft 365 Copilot for Android and Microsoft 365 Copilot for iOS.

The attacker does not need a login, but they still need the user to interact with malicious input. So it’s mainly a risk when someone can send you a convincing Copilot prompt/link/message that you then open or use.

How urgent is it

This is RED because the flaw can enable remote code execution and attackers only need to trick a user into interacting with malicious Copilot input.

Even without confirmed KEV listings, the combination of critical impact potential and no attacker authentication requirement makes quick patching on mobile devices the priority.

What to do — in detail

Confirm exposure in your environment
- Identify which employees use Microsoft 365 Copilot on mobile.
- For each affected device, check the installed version of Microsoft 365 Copilot for Android and Microsoft 365 Copilot for iOS.
Apply the fix
- Microsoft 365 Copilot for Android: upgrade to the latest published release available in the Google Play app store (fix is included in the publication).
- Microsoft 365 Copilot for iOS: upgrade to the latest published release available in the Apple App Store (fix is included in the publication).
- If you manage mobile apps via an enterprise mobility program, ensure the updated Copilot build is approved/allowed.
Temporary workaround if upgrades are delayed
- Instruct staff not to interact with unexpected Copilot prompts, links, or attachments they did not request.
- Treat unusual “Copilot-generated” calls-to-action (for example, prompts urging the user to click something or submit specific content) as suspicious until the app is updated.
What to monitor
- Watch for reports of unusual device behavior after interacting with Copilot content (unexpected pop-ups, app crashes, or new permissions prompts).
- Review internal incident reports and helpdesk tickets for any Copilot-related user interactions that occurred right before suspicious events.
Timing
- KEV (CISA Known Exploited Vulnerabilities) is not listed for this CVE in the provided findings, so there is no specific KEV due date here. Given the RED verdict and the remote code execution capability, prioritize mobile app updates immediately.

Technical context

CVE-2026-48561 involves command injection (CWE-77) in Microsoft 365 Copilot for Android and Microsoft 365 Copilot for iOS. The findings indicate an attacker can trigger execution over a network without authentication, but user interaction is required—meaning the victim must interact with malicious input delivered through Copilot.

Verdict context: This is treated as RED despite no KEV listing and no clear dated public exploitation report in the provided findings. The patch is available in published releases for both Android and iOS (no specific fixed version numbers were provided in the findings).

This is a general assessment based on public vulnerability data. It does not account for your specific infrastructure — when in doubt, consult a security specialist.

Exploitation

Where each signal puts this CVE on the scale from published to confirmed exploited.

EPSS57th

CISA KEV

Not in the catalog. CISA has not confirmed exploitation.

Public exploits

No public exploit or proof of concept found in the sources we track.

EPSS

0.9% chance of exploitation activity in the next 30 days, which ranks it in the 57th percentile of scored CVEs.

Exploit Prediction Scoring System, FIRST.org. A probability, not a confirmation.

Lifecycle

12 events over 12 days, from the signal feeds we watch.

2026-07-26Patch availablerecord updated
2026-07-17Analysis publishedMicrosoft's biggest Patch Tuesday ever: what I'd actually fix first
2026-07-16Patch availablerecord updated
2026-07-15Record updatedrecord updated
2026-07-14Publishedweakness classified, att&ck mapped, record updated, record updated

Affected products

Microsoftcommercial · US
- Microsoft Edge Copilot for AndroidOn-premOperating Systems / windows
- Microsoft Edge Copilot for IOSOn-premOperating Systems / windows
- 365 copilotSaaS ServiceOn-premCloud & SaaS / saas-application

Technical detail

CVSS 3.1 vector

Open in the CVSS calculator

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Scored 9.6 by NVD.

How it is reached

Attack Vector NetworkExploitable remotely over the network without any special conditions
Attack Complexity LowNo special conditions — the attack can be reliably reproduced
Privileges Required NoneNo authentication required — anyone can exploit this
User Interaction RequiredA user must click a link, open a file, or perform some action

Scope

Scope ChangedThe exploit can affect other components (e.g. sandbox escape, host compromise from VM)

Impact if exploited

Confidentiality HighTotal information disclosure — all data in the component is compromised
Integrity HighTotal loss of integrity — attacker can modify any data in the component
Availability HighTotal denial of service — the component is completely unavailable