Improper authorization in Copilot Cowork allows an unauthorized attacker to elevate privileges over a network.
CWE-285