I think that Microsoft would rather not acknowledge that one. It's much easier to hide behind a simple "bug" than to admit to such a massive security breach.
Not a bug, a “code issue”.
I.e. LLM slop code that wasn't adequately tested.
It's a feature now.