Vulnerability research · Demo
Microsoft Teams & Forms poll integrity failure
2025-05-01
Integrity failure in Microsoft Teams polls / Forms voting — because vote limits are missing, ballots can be cast under other people’s names and appear legitimate in the manager’s voter list.
Watch on YouTube →Microsoft Teams & Forms — Poll Data Integrity Failures
During voting with poll and Forms features in Microsoft Teams, there is no effective limit on who can cast votes or how names are bound to ballots.
That makes it possible to compromise vote integrity by submitting votes under arbitrary names. When a manager reviews the voter list in poll management, they may see people who never actually voted.
Watch: YouTube