这个漏洞揭示了智能体系统设计中的核心安全痛点，使用 Microsoft Copilot 的团队需要立即关注并评估风险，建议检查相关配置并限制代理的邮件发送权限。
微软的 Copilot Cowork 产品存在安全漏洞，允许攻击者通过提示注入实现数据外泄。该漏洞利用代理发送包含外部图片的邮件，当用户打开邮件时，图片会触发网络请求，从而泄露数据。由于 OneDrive 可生成预认证下载链接，攻击者能通过提示注入获取这些链接并下载文件。这凸显了智能体系统在防止数据泄露方面的持续挑战。
Microsoft Copilot Cowork Exfiltrates Files
Microsoft Copilot Cowork Exfiltrates Files The biggest challenge in designing agentic systems continues to be preventing them from enabling attackers to exfiltrate data. In this case Microsoft Copilot Cowork (yes, that's a real product name ) was allowing agents to send emails to the user's own inbox without approval... but those messages were then displayed in a way that could leak data to an attacker via rendered images: Because these messages can contain external images that trigger network requests to external websites, data can be exfiltrated when a user opens a compromised message sent by the agent. Since OneDrive can create pre-authenticated download links, a successful prompt injection could cause those links to be leaked, allowing files to be downloaded by the attacker. Via Hacker News Tags: microsoft , security , ai , prompt-injection , generative-ai , llms , exfiltration-attacks , lethal-trifecta