Microsoft 365 Copilot: New Zero-Click AI Vulnerability Allows Corporate Data Theft

Aim Labs disclosed 'EchoLeak', a zero-click RAG/LLM vulnerability in Microsoft 365 Copilot that uses an 'LLM Scope Violation' indirect prompt-injection technique to automatically exfiltrate sensitive data from Copilot's context (mailbox, OneDrive, SharePoint, Teams, Office files). The report outlines an attack chain including XPIA bypass, link/image redaction bypass and CSP bypass, warns the technique can generalize to other RAG apps, and states Microsoft was informed in January 2025 and patched the issue in May 2025.