Azure Command-line Interface (Microsoft) - vulnerabilities (CVEs)

5 CVEs, 1 in the last 30 days, 189 known versions, newest CVE from 2026-10-13. Vendor: Microsoft.

CVEs of Azure Command-line Interface

• CVE-2026-69877 - CVSS 6.5 (medium), 2026-10-13: Origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a network.
• CVE-2025-24049 - CVSS 8.4 (high), 2025-03-11: Improper neutralization of special elements used in a command ('command injection') in Azure Command Line Integration (CLI) allows an unauthorized attacker to…
• CVE-2024-43591 - CVSS 9.1 (critical), 2024-10-08: Azure Command Line Integration (CLI) Elevation of Privilege Vulnerability
• CVE-2023-36052 - CVSS 8.6 (high), 2023-11-14: Azure CLI REST Command Information Disclosure Vulnerability
• CVE-2022-39327 - CVSS 9.8 (critical), 2022-10-25: Azure CLI is the command-line interface for Microsoft Azure. In versions previous to 2.40.0, Azure CLI contains a vulnerability for potential code injection.…