CVE-2026-85887 [HIGH] – Incorrect permission assignment for critical resource in M365 Copilot allows an authorized

Incorrect permission assignment for critical resource in M365 Copilot allows an authorized attacker to disclose information over a network.