CoSnitch Attack Exposes Microsoft Copilot Vulnerabilities

Researchers from Varonis Threat Labs discovered a vulnerability in Microsoft Copilot Personal, dubbed 'CoSnitch,' that allows attackers to execute commands without user confirmation. By manipulating the AI's responses, they revealed an undocumented URL parameter, '?autorun=1', which could trigger automatic prompt execution. This vulnerability could lead to data exfiltration and memory poisoning. Microsoft was informed in December 2025, and patches were released on August 18, 2026. The vulnerability is tracked as CVE-2026-24301, rated 8.8 under CVSS 3.1. No evidence of exploitation in the wild has been reported. Microsoft stated that enterprise customers are unaffected, and no action is required from users. The flaw primarily affects Copilot Personal, not enterprise versions.

Key Points: • CoSnitch vulnerability allows unauthorized command execution in Copilot Personal. • The undocumented '?autorun=1' parameter can trigger actions without user interaction. • Microsoft issued patches on August 18, 2026, after being notified in December 2025.