CVE-2026-55145: Improper neutralization of special elements used in a command ('command injection') in Outlook Copilot allows an authori

CVE-2026-55145 is a command injection vulnerability (a type of attack where an attacker inserts malicious commands into user input) in Outlook Copilot that allows an authorized user to tamper with the system over a network. The vulnerability stems from improper handling of special characters in commands. The CVSS severity score (a 0-10 rating of how dangerous the vulnerability is) has not yet been assigned by NIST.