CVE-2026-58617: Improper access control in Microsoft 365 Copilot for iOS allows an unauthorized attacker to elevate privileges over a ne

CVE-2026-58617 is a vulnerability in Microsoft 365 Copilot for iOS that allows an unauthorized attacker to gain elevated privileges (higher access permissions) over a network due to improper access control (failing to properly verify who is allowed to do what in the system). The vulnerability has a CVSS score of 4.0, which indicates a moderate severity level.