PT-2025-10803 · Microsoft+1 · Azure Cli+1

Gavin

+2

·

Published

2025-03-11

·

Updated

2026-02-17

·

CVE-2025-24049

CVSS v3.1

8.4

High

VectorAV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: Azure Command Line Integration (CLI) (affected versions not specified)
Description: The issue is related to improper neutralization of special elements used in a command, also known as 'command injection', in Azure Command Line Integration (CLI). This allows an unauthorized attacker to elevate privileges locally.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

BDU:2025-02634
BIT-AZURE-CLI-2025-24049
CVE-2025-24049
OPENSUSE-SU-2025_1019-1
OPENSUSE-SU-2026:10211-1
SUSE-SU-2025:1019-1
SUSE-SU-2025:1182-1
SUSE-SU-2025_1019-1
SUSE-SU-2025_1182-1
SUSE-SU-2026:0273-1

Affected Products

Azure Cli
Suse