7.2
High
CVE-2026-81349 Improper neutralization of special elements used in an os command ('os command injection') in Azure HDInsights allows an…
Description
Improper neutralization of special elements used in an os command ('os command injection') in Azure HDInsights allows an authorized attacker to elevate privileges over a network.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Azure HDInsight 1.0 | 1.0 → < 2606012120 | 2606012120 |
References
- Azure HDInsight Ambari Elevation of Privilege Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Azure HDInsight
The 12 CVEs of Azure HDInsight →
CVE-2026-85891
Exposure of sensitive information to an unauthorized actor in Azure HDInsight allows an unauthorized attacker to…
7.5
High
CVE-2026-21529
Improper neutralization of input during web page generation ('cross-site scripting') in Azure HDInsights allows an…
5.7
Medium
CVE-2024-21330
Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability
7.8
High
CVE-2023-36419
Azure HDInsight Apache Oozie Workflow Scheduler XXE Elevation of Privilege Vulnerability
8.8
High