SB20261110357 - OS Command Injection in Azure Machine Learning

Description

This security bulletin contains information about 1 vulnerability.

1) OS Command Injection (CVE-ID: CVE-2026-109457)

CWE-ID: CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

CVSSv4: 8.5 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote user to execute arbitrary code with another user's local permissions.

The vulnerability exists due to improper neutralization of special elements used in operating system commands in Azure CLI when connecting to jobs in a shared workspace. A remote user can use job submission permissions to submit a specially crafted job and convince another user to connect to it using Azure CLI to execute arbitrary commands with that user's local permissions.

Remediation

Install update from vendor's website.

References

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2026-109457
• https://github.com/Azure/azure-cli-extensions/blob/main/src/machinelearningservices/CHANGELOG.rst