CVE-2026-105014
CVE-2026-105014 · Azure Pipelines Remote Code Execution Vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Improper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows an unauthorized attacker to execute code over a network.
CVSS 9.1 · Critical · EPSS 0.7%
- Published
- Updated
Affected products and versions
azure pipelines
- Versions
- -: Affected
No fix published