Microsoft Copilot Cowork is vulnerable to file exfiltration attacks via indirect prompt injection. The security flaw stems from the system's insecure automatic approvals for sending emails and Teams messages, which attackers can exploit to steal data.