CVE-2026-105014
Azure Pipelines Remote Code Execution Vulnerability
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Public exploit
- None on Exploit-DB
Summary
Azure Pipelines, Microsoft's cloud service for automating software builds and deployments, is affected by this vulnerability. An unauthorized attacker could exploit it over a network to run arbitrary code on the affected system.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
Improper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows an unauthorized attacker to execute code over a network.
Affected versions
- Microsoft Azure Pipelines
-