6.5
Medium
CVE-2025-24986 Improper isolation or compartmentalization in Azure PromptFlow allows an unauthorized attacker to execute code over a…
Description
Improper isolation or compartmentalization in Azure PromptFlow allows an unauthorized attacker to execute code over a network.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Azure promptflow-core 1.0 | 1.0.0 → < 1.17.2 | 1.17.2 |
| Azure promptflow-tools 1.0 | 1.0.0 → < 1.6.0 | 1.6.0 |