Copilot Cowork agents could send messages to a user’s inbox without approval; external images in those messages can leak OneDrive pre-authenticated links.