Threat
CoSnitch CVE-2026-24301: Copilot Flaw Explained
First reported · Discovered advisori.de
Page published
Earliest dated coverage: 3 Nov 2026 · First observed: 6 Nov 2026 · Latest dated coverage: 3 Nov 2026
Coverage timeline
Single-source analysis — one report is available.
Why it matters
CoSnitch demonstrates how connected-account permissions and persistent assistant memory can enable single-click data theft through a trusted AI assistant.
CoSnitch (CVE-2026-24301) is a reported Microsoft Copilot Personal vulnerability chain that allowed a crafted link to trigger commands and access data from connected Gmail, Google Drive, and Calendar accounts. A separate flaw enabled persistent instructions in the assistant's memory. Microsoft fixed the issue server-side on 18 August 2026; Microsoft 365 Copilot was unaffected, and no exploitation in the wild is known.