CVE-2025-65037

Improper control of generation of code ('code injection') in Azure Container Apps allows an unauthorized attacker to execute code over a network.

Score

CVSS 3.1 10.0 Critical

Status

Analyzed - secure@microsoft.com

Published

2025-12-18

Last modified

2026-04-16

Weaknesses

CWE-94

Affected products

• Azure Container Apps (Microsoft)

References

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-65037