Microsoft Copilot Studio agents public by default — unauthorized data exfiltration
Date: 2025-06-01
Affected: Microsoft Copilot Studio — enterprise agents with business data access
Attack vector: auth-bypass
Category: real-world
Severity: Critical

Agents built in Microsoft Copilot Studio were public by default and lacked authentication. Attackers could enumerate and access exposed agents, pulling confidential business data from production environments.

Impact: Unauthorized agent access; business intelligence theft; data exfiltration

Mitigations:
Agent enumeration protection
Default-deny access for agent deployments
Mandatory authentication for all agent endpoints

Architectural layers (MAESTRO):
label: Deployment & Infrastructure
notes: Default public exposure with no authentication
role: origin
label: Data Operations
notes: Confidential business data exfiltrated via exposed agents
role: impact