2025-06 · 2025-Q2
EchoLeak - Microsoft 365 Copilot Zero-Click Prompt Injection
Who actually said "do this"?
- Fixable
- Vendor patch
- Vendor response
- Patched
- In the wild
- No
- Actor
- Attacker
Target
Microsoft 365 Copilot
Impact
Zero-click data exfiltration from M365 sessions via crafted email; bypassed XPIA classifier
Root cause
AI command injection via hidden text, speaker notes, and metadata in documents
CVE
Sources
Catalog
Cite this: AgentProv incident record: EchoLeak - Microsoft 365 Copilot Zero-Click Prompt Injection (2025-06). https://agentprov.com/incidents/2025-06-echoleak-microsoft-365-copilot-zero-click-prompt-injection
Related
- Also L2 · 2026-10-15Datadog: Counterfeit Policy Text Collapses an Injection Classifier's Recall and Pushes a LangChain Risk Gate Under Its Block ThresholdL2Instruction
- Also L2 · 2026-10-08Cisco Talos: Four Malware Families Carry Instructions Aimed at the LLMs That Triage ThemL2Instruction
- Also L2 · 2026-10-07Barracuda: Phishing Emails Carry Hidden Prompt Injections for the Recipient's AI Inbox AssistantL2Instruction