M365 Copilot Search P2P Injection (SearchLeak)

Ethan Andrews@eandrews

•updated Jun 15, 2026•8•0•37

Detects network requests to Microsoft 365 Copilot Enterprise Search containing suspicious HTML tags or prompt injection keywords in the query parameter, indicating a potential Parameter-to-Prompt (P2P) injection attempt (CVE-2026-42824).