2024-08-06 · 2024-Q3
Microsoft Copilot Studio SSRF
Where is this data going, and who chose that?
- Fixable
- Vendor patch
- Vendor response
- Patched
- In the wild
- No
- Actor
- Attacker
Target
Microsoft Copilot Studio
Impact
Access to Microsoft internal infrastructure, IMDS, and internal Cosmos DB; cross-tenant impact possible
Root cause
Server-Side Request Forgery via HTTP header manipulation and redirect techniques
CVE
Sources
Catalog
Cite this: AgentProv incident record: Microsoft Copilot Studio SSRF (2024-08-06). https://agentprov.com/incidents/2024-08-06-microsoft-copilot-studio-ssrf
Related
- Also L8 · 2026-10-01A Read-Only Grok Bot "CFO" Agent Posted a CEO's Bank Balances to the Company SlackL8Output / Destination
- Also L8 · 2026-09-29"PixelLeak": AI Coding Agents Posted 13,000+ Internal Screenshots From 300+ Organizations to Public GitHub RepositoriesL8Output / Destination
- Also L8 · 2026-09-22Z.ai's ZCode Coding Agent Uploaded Entire Local Repositories, Git History Included, to Alibaba Cloud by DefaultL8Output / Destination