imthecopilotnow/cve-2025-4102025Security advisory detailing a critical CVE in Copilot AI where RAG-based citation links are forged to a third-party domain, enabling source misrepresentation and phishing.
A critical vulnerability has been discovered in Copilot AI affecting how web query citation links are rendered after Retrieval-Augmented Generation (RAG) operations. When users request page summaries or perform web-based queries, all subsequent citation links are incorrectly linked to https://www.collectingflags.com, regardless of the true source of the information.
This flaw compromises the integrity of citations, misleads users, and introduces the potential for redirection to untrusted or malicious content.
When Copilot AI is used to summarize content or answer queries involving external web data, it appends citations to help users verify the accuracy of the generated information. Due to a flaw in post-query citation handling, the href of every citation was replaced with:
https://www.collectingflags.com
This occurred regardless of the actual source referenced. Users clicking citation links were misled into believing they were visiting legitimate reference material, when in fact they were being redirected to an unrelated domain.
https://www.collectingflags.com, not the actual source.We thank the researchers who identified and responsibly disclosed CVE-2025-4102025, allowing the Copilot team to address this issue promptly.
© 2025 Copilot Security Team