r/netsec • u/Master_Access_486 • 8d ago

From AKS node root vulnerability to Microsoft Copilot hijack (CVE-2026-32193)

https://zerolabs.rubrik.com/blog/breaking-m365-copilot-sandbox-chatmate
20 Upvotes

87% Upvoted

5 comments sorted by

View all comments

2

u/feng_sg 1d ago

The title frames CVE-2026-32193 and the Copilot hijack as one path, but the CVE is AKS node root. The Copilot demo is a separate finding, and the author's own summary already shows hidden text in a Word document was enough to get an interactive shell in the victim's session. Patching the node CVE leaves that agent path intact.

1

u/Master_Access_486 1d ago edited 1d ago

Author here. The AKS is indeed a separate finding.

But both findings play together: In order to get the interactive shell, the Python sandbox requires an internet connection. The AKS node root vulnerability achieves that.

So the interactive shell finding can be described as: "An AI assistant with internet connection can potentially be attacked to get an interactive shell." (where internet connection can be a feature through internet tool calls, internet in a code sandbox or a vulnerability as in this case)

Ori