Exploitation Summary
EIP tracks 4 public exploits for CVE-2025-32711. PoCs published by daryllundy, Danielossai12, TreRB.
AI-analyzed exploit summary This repository contains PowerShell-based detection and remediation tools for CVE-2025-32711 (EchoLeak), a zero-click vulnerability in Microsoft 365 Copilot. The scripts analyze email patterns, audit logs, and security configurations to identify potential exploitation and apply mitigations.
Description
Ai command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.
Exploits (4)
This repository contains PowerShell-based detection and remediation tools for CVE-2025-32711 (EchoLeak), a zero-click vulnerability in Microsoft 365 Copilot. The scripts analyze email patterns, audit logs, and security configurations to identify potential exploitation and apply mitigations.
This repository provides a detailed technical analysis of CVE-2025-32711, a zero-click indirect prompt injection vulnerability in Microsoft 365 Copilot. It explains the attack chain, including bypasses for XPIA classifiers, link redaction, auto-fetched images, and CSP via Teams proxy, leading to silent data exfiltration.
This repository contains a functional black-box testing tool for CVE-2025-32711, which exploits indirect prompt injection leading to markdown/HTML exfiltration in LLM-backed chatbots. It launches a headless browser, spins up a local HTTP sink, and delivers payloads to test if the chatbot frontend fetches attacker-controlled URLs, confirming the vulnerability.
This repository contains PowerShell scripts for detecting and remediating CVE-2025-32711 (EchoLeak), a zero-click vulnerability in Microsoft 365 Copilot. The scripts focus on identifying suspicious email patterns and security misconfigurations rather than exploiting the vulnerability.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N