Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevate privileges over a network.

A URL redirection vulnerability (open redirect) in Microsoft 365 Copilot allows unauthorized attackers to redirect users to untrusted sites. This vulnerability can be exploited to elevate privileges over a network. The issue affects M365 Copilot and represents a significant security risk for organizations using Microsoft's AI-powered productivity tool. Attackers could potentially use this vulnerability to conduct phishing attacks or gain unauthorized access to network resources.