azure_cli vulnerabilities
CVEs whose affected-version data names the azure_cli package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-69877Medium· 6.5Origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a network.
Origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a network.
▾ SunlitMicrosoft · Azure CLIEPSS 0.46%via NVD
CVE-2025-64140High· 8.8Jenkins Azure CLI Plugin 0.9 and earlier does not restrict which commands it executes on the Jenkins controller, allowing attackers with Item/Configure permission to execute arbitrary shell commands.
Jenkins Azure CLI Plugin 0.9 and earlier does not restrict which commands it executes on the Jenkins controller, allowing attackers with Item/Configure permission to execute arbitrary shell commands.
▾ Twilightjenkins · azure_cliEPSS 0.61%via NVD