Skip to content
Sign in
8.4 High

CVE-2025-24049 Improper neutralization of special elements used in a command ('command injection') in Azure Command Line Integration…

Description

Improper neutralization of special elements used in a command ('command injection') in Azure Command Line Integration (CLI) allows an unauthorized attacker to elevate privileges locally.

Affected products and versions

Product Affected versions Fixed in
Azure CLI 2.0 2.0.0 → < 2.69.0 2.69.0

Other CVEs of Azure CLI

The 3 CVEs of Azure CLI →
CVE-2026-69877 Origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a network 6.5 Medium CVE-2024-43591 Azure Command Line Integration (CLI) Elevation of Privilege Vulnerability 8.7 High
Track this CVE