Microsoft 365 Copilot – Arbitrary Data Exfiltration Via Mermaid Diagrams

tl;dr When Microsoft 365 Copilot (M365 Copilot) was asked to summarize a specially crafted Microsoft Office document, an indirect prompt injection payload triggered the execution of arbitrary instructions to fetch sensitive tenant data, such as recent emails and hex encode...