Critical Microsoft Copilot CoSnitch Flaw Lets Hackers Steal Sensitive Data With One Click

Gbhackers •Divya • August 19, 2026

A critical one-click vulnerability in Microsoft Copilot Personal, tracked as CVE-2026-24301 and dubbed CoSnitch. This flaw could enable an attacker to trigger malicious Copilot prompts, access data from connected OAuth applications, and silently transmit that information to an attacker-controlled server. Microsoft addressed this issue on August 18, 2026, following Varonis’s responsible disclosure in December 2025. […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CoSnitch Attack Exposes Microsoft Copilot Vulnerabilities Researchers from Varonis Threat Labs discovered a vulnerability in Microsoft Copilot Personal, dubbed 'CoSnitch,' that allows attackers to execute commands without user confirmation. By manipulating the AI's responses, they revealed an undocumented URL parameter, '?autorun=1', which could trigger automatic prompt execution. This vulnerability could lead to data exfiltration and memory poisoning. Microsoft was informed in December 2025, and patches were released on August 18, 2026. The vulnerability is tracked as CVE-2026-24301, rated 8.8 under CVSS 3.1. No evidence of exploitation in the wild has been reported. Microsoft stated that enterprise customers are unaffected, and no action is required from users. The flaw primarily affects Copilot Personal, not enterprise versions. 10 sources 61

Extracted Entities

Critical Microsoft Copilot CoSnitch Flaw Lets Hackers Steal Sensitive Data With One Click

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (1)

MITRE ATT&CK (2)

Platforms (1)

Vulnerabilities (1)