EchoLeak: Zero-Click Data Leak in Microsoft 365 Copilot
Nothing to patch: Microsoft fixed it in its cloud service before disclosure and saw no exploitation, but it is the reference case for why AI assistants that read untrusted content need guardrails.
Must act: Teams building their own RAG assistants or agents over email, documents or tickets, who should check for the same injection-to-exfiltration pattern.
Can relax: Microsoft 365 Copilot customers, who need take no action for this CVE.
- Take no action for CVE-2025-32711 itself; Microsoft states it is fully mitigated.
- Apply sensitivity labels and DLP so Copilot respects access boundaries on your most sensitive content.
- If you build RAG assistants, treat retrieved external content (inbound email, shared docs) as untrusted input and isolate it from privileged data.