Jun 11, 2025Confirmed
EchoLeak: one crafted email made Microsoft 365 Copilot leak internal files, no click needed (CVE-2025-32711)
AI loose in the worldInjectionDERIVED
Approved by person, Oct 12, 2026. How entries are approved
Aim Security disclosed EchoLeak (CVE-2025-32711, CVSS 9.3), a zero-click indirect prompt injection in Microsoft 365 Copilot: a single crafted email, with no user interaction, could make Copilot retrieve internal files and exfiltrate their contents to an attacker-controlled server. Microsoft patched the flaw server-side in its June 2025 update cycle and said it found no in-the-wild exploitation.
What this means for youAt home, the AI assistants built into your email and documents can be turned against you by a message you never open. At work and in government, treat AI tools as software that needs patching, and confirm the June 2025 Copilot fix is applied.
Sources
- Microsoft Security Response Centerhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-32711
Incident records from the AI Agent Incident Database by sipi.bot (https://sipi.bot/incidents/), licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/).
Source data license: CC BY 4.0. Attribution to sipi.bot is required.
Covered by snapshot 45
da93f03b406f409940d0a6ef47b526607f82ebf457d98f69299b88aceede576a
This entry is record number 2421. It has not been edited since it was approved; the hash above would not match if it had. How to verify