CVE-2026-21531
CVE-2026-21531 · Azure SDK for Python Remote Code Execution Vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Deserialization of untrusted data in Azure SDK allows an unauthorized attacker to execute code over a network.
CVSS 9.8 · Critical · EPSS 2.6% · Fix available
- Published
- Updated
Stack: python
Affected products and versions
azure ai language authoring
- Versions
- ≥ 1.0.0, < 1.0.0b4: Affected (custom)
No fix published
azure-ai-language-conversations-authoring PyPI
- Versions
- 1.0.0b1
- 1.0.0b2
- 1.0.0b3
- Affected ranges
- ECOSYSTEM: < 1.0.0b4
Update to 1.0.0b4