Sign in

8.8 High

CVE-2023-36437 Azure DevOps Server Remote Code Execution Vulnerability

Description

Azure DevOps Server Remote Code Execution Vulnerability

Affected products and versions

Product	Affected versions	Fixed in
Azure Pipelines Agent 1.0	1.0.0 → < 2.39.1	2.39.1

Do you use Azure Pipelines Agent?

Track this CVE Watch Azure Pipelines Agent Check my SBOMs

www.cveye.io/en/cve/CVE-2023-36437

Timeline

Published November 14, 2023
Last modified October 8, 2025

References

Azure DevOps Server Remote Code Execution Vulnerability msrc.microsoft.com

Track this CVE