Overview
What is CVE-2026-80098?
Improper verification of cryptographic signature in Copilot Studio allows an unauthorized attacker to elevate privileges over a network.
Vulnerability intelligence
CVE-2026-80098 and is rated Critical severity with a CVSS score of 10.0. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.
Improper verification of cryptographic signature in Copilot Studio allows an unauthorized attacker to elevate privileges over a network.