EchoLeak Zero-Click Prompt Injection on M365 Copilot

# EchoLeak Zero-Click Prompt Injection on M365 Copilot

https://gcdradar.vercel.app/incidents/echoleak-zero-click-prompt-injection-on-m365-copilot · AIR-2026-0356 · closed 2026-07-14

- Lane: Research
- Severity: 1 (Research / proof of concept)
- Fix status: Fix status unknown
- First reported: 2026-06-30 (happened 2025-05)
- AI role: Attack on AI
- Products: Microsoft 365 Copilot

## Summary

Researchers uncovered a zero-click prompt injection vulnerability in Microsoft 365 Copilot exploiting RAG context. Malicious emails triggered unauthorized data retrieval and subsequent exfiltration without user interaction.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2026-06-30: Breaking down 'EchoLeak', the First Zero-Click AI Vulnerability Enabling Data Exfiltration from Microsoft 365 Copilot (https://catonetworks.com/blog/breaking-down-echoleak)
- 2026-06-30: CVE-2025-32711 (https://cve.org/CVERecord?id=CVE-2025-32711)
- 2026-06-30: EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System (https://arxiv.org/abs/2509.10540)
- 2026-06-30: EchoLeak: Zero-Click Prompt Injection Targeting M365 Copilot for Data Exfiltration (https://atlas.mitre.org/studies/AML.CS0059)

## Sources

- 2026-06-30 MITRE ATLAS: EchoLeak: Zero-Click Prompt Injection Targeting M365 Copilot for Data Exfiltration https://atlas.mitre.org/studies/AML.CS0059
- 2026-06-30 arXiv: EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System https://arxiv.org/abs/2509.10540
- 2026-06-30 cve.org: CVE-2025-32711 https://cve.org/CVERecord?id=CVE-2025-32711
- 2026-06-30 catonetworks.com: Breaking down 'EchoLeak', the First Zero-Click AI Vulnerability Enabling Data Exfiltration from Microsoft 365 Copilot https://catonetworks.com/blog/breaking-down-echoleak

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.