Monday, April 20, 2026 · 2 of 5

1. CVE-2026-21520: Copilot Studio prompt injection — data leaked even after the patch

   Capsule Security's "ShareLeak" demo showed customer data still exfiltrating via Microsoft's patched agent; companion "PipeLeak" affects Salesforce Agentforce

   Apr 15