Breaking down ‘EchoLeak’, the First Zero-Click AI Vulnerability Enabling Data Exfiltration from Microsoft 365 Copilot

## Executive Summary Aim Labs disclosed "EchoLeak", a zero-click vulnerability chain against Microsoft 365 Copilot that leverages an "LLM Scope Violation" to cause the model to access and exfiltrate privileged organizational context without user interaction; the research details bypasses of XPIA prompt-injection classifiers, markdown link/image redaction, and Content-Security-Policy (using SharePoint/Teams redirect primitives), describes weaponization techniques (RAG spraying and crafted instructions), and reports the issue to Microsoft with no known customer impact to date.