CVE-2026-26129 is a high-severity vulnerability in Microsoft 365 Copilot involving improper neutralization of special elements. This flaw allows an unauthorized attacker to disclose sensitive information over a network without requiring privileges or user interaction.