CVE-2026-55946: Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unaut

Microsoft Copilot has a command injection vulnerability (a flaw where special characters in user input are not properly filtered, allowing attackers to execute unintended commands), which lets an unauthorized attacker access and leak sensitive information over a network.