Azure AI Language Authoring Elevation of Privilege Vulnerability can Lead to RCE
Deserialization of untrusted data in the Azure AI Language Conversations Authoring client library for Python allows an unauthorized attacker to execute code over a network.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-21531US | — | Exploit | ||
Deserialization of untrusted data in Azure SDK allows an unauthorized attacker to execute code over a network. | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/Azure/azure-sdk-for-pythonPACKAGE
- https://github.com/advisories/GHSA-436v-jg82-p533ADVISORY
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21531WEB
- https://nvd.nist.gov/vuln/detail/CVE-2026-21531ADVISORY
- https://pypi.org/project/azure-ai-language-conversations-authoringPACKAGE
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan