Sign in

9.0 Critical

CVE-2025-47158 Authentication bypass by assumed-immutable data in Azure DevOps allows an unauthorized attacker to elevate privileges…

Description

Authentication bypass by assumed-immutable data in Azure DevOps allows an unauthorized attacker to elevate privileges over a network.

Affected products and versions

Product	Affected versions	Fixed in
Azure DevOps	Versions not published

The 3 CVEs of Azure DevOps →

CVE-2026-42826 Exposure of sensitive information to an unauthorized actor in Azure DevOps allows an unauthorized attacker to disclose… 10.0 Critical CVE-2025-29813 Authentication bypass by assumed-immutable data in Azure DevOps allows an unauthorized attacker to elevate privileges… 10.0 Critical

Do you use Azure DevOps?

Track this CVE Watch Azure DevOps Check my SBOMs

www.cveye.io/en/cve/CVE-2025-47158

Timeline

Published July 18, 2025
Last modified February 26, 2026

References

Azure DevOps Server Elevation of Privilege Vulnerability msrc.microsoft.com

Track this CVE