A critical vulnerability chain dubbed SearchLeak (CVE-2026-42824) was discovered in Microsoft 365 Copilot Enterprise, enabling potential one-click data theft via a malicious URL. The attack chained three flaws-prompt injection through the Copilot search parameter, an HTML rendering race condition, and an SSRF issue in Bing’s image search to extract sensitive data from emails, OneDrive, SharePoint, and calendar events. When a victim clicks a crafted link, Copilot is manipulated into retrieving internal data and embedding it in image requests that are silently sent to an attacker-controlled server via Bing. Microsoft has already patched the issue, and no user action is required, but it highlights how combining multiple vulnerabilities can turn AI systems into powerful data exfiltration tools.