PT-2025-10803

CVE-2025-24049

·

Published

2025-03-11

·

Updated

2026-09-18

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: Azure Command Line Integration (CLI) (affected versions not specified)
Description: The issue is related to improper neutralization of special elements used in a command, also known as 'command injection', in Azure Command Line Integration (CLI). This allows an unauthorized attacker to elevate privileges locally.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-77: Improper Neutralization of Special Elements used in a Command (\'Command Injection\')
Related identifiers
CVE-2025-24049
BDU:2025-02634
BIT-AZURE-CLI-2025-24049
CLEANSTART-2026-OH23140
CLEANSTART-2026-TB31974
OPENSUSE-SU-2025_1019-1
OPENSUSE-SU-2026:10211-1
SUSE-RU-2026:2237-1
SUSE-RU-2026:2237-2
SUSE-SU-2025:1019-1
SUSE-SU-2025_1019-1
SUSE-SU-2025:1182-1
SUSE-SU-2025_1182-1
SUSE-SU-2026:0273-1
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com