{"id":"CVE-2026-109457","kind":"vulnerability","aliases":["CVE-2026-109457"],"related":[],"title":"Azure CLI: OS command injection lets an authorized user run code","description":"Improper neutralization of special elements used in an os command ('os command injection') in Azure CLI allows an authorized attacker to execute code over a network.","summary":"Azure CLI does not neutralize special characters in input passed to an operating system command, so a flaw in its command handling can be abused. An attacker with valid access can run code over the network.","severity":"high","cvss":8.0,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["azure","azure-cli","ci","package"],"not_affected_if":["unknown"],"how_to_check":"- Run `az version` and compare the azure-cli version against the fixed version, which the sources do not state.","fix":null,"status":"open","published_at":"2026-11-10T19:18:14+00:00","first_seen_at":"2026-11-10T19:24:23+00:00","triaged_at":"2026-11-10T19:36:17+00:00","updated_at":"2026-11-10T19:36:17+00:00","category":"package","confidence":0.5,"triage":{"at":"2026-11-10T19:36:17Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Azure CLI: OS command injection lets an authorized user run code","impact":"high","summary":"Azure CLI does not neutralize special characters in input passed to an operating system command, so a flaw in its command handling can be abused. An attacker with valid access can run code over the network.","audience":"businesses","category":"package","nicknames":[],"who_cares":["azure-cli","azure","ci"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"code runs on the machine running Azure CLI","analyst_note":"Find the affected and fixed azure-cli versions and the triggering command in the NVD entry or the vendor advisory.","how_to_check":"- Run `az version` and compare the azure-cli version against the fixed version, which the sources do not state.\n- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["unknown"],"who_is_affected":"Teams that run Azure CLI on shared machines, CI runners or automation hosts where authorized users or pipelines pass input into az commands. The sources do not say which commands or arguments trigger the flaw, so a team should check its own usage. unknown","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000674,"input_tokens":4496,"output_tokens":448,"severity_before":"high"},"analyst_status":"queued","analyst_note":"Find the affected and fixed azure-cli versions and the triggering command in the NVD entry or the vendor advisory.","search":"'-109457':14A,17A '-2026':13A,16A 'abus':48B 'access':53B 'allow':76C 'attack':50B,79C 'author':8A,78C 'azur':1A,18B,20B,24B,74C 'azure-c':19B 'charact':30B 'ci':22B 'cli':2A,21B,25B,75C 'code':11A,56B,82C 'command':4A,38B,44B,69C,71C 'cve':12A,15A 'element':64C 'execut':81C 'flaw':41B 'handl':45B 'improp':60C 'inject':5A,72C 'input':32B 'let':6A 'network':59B,85C 'neutral':28B,61C 'oper':36B 'os':3A,68C,70C 'packag':23B 'pass':33B 'run':10A,55B 'special':29B,63C 'system':37B 'use':65C 'user':9A 'valid':52B","nicknames":[],"mitigations":[],"who_affected":"Teams that run Azure CLI on shared machines, CI runners or automation hosts where authorized users or pipelines pass input into az commands. The sources do not say which commands or arguments trigger the flaw, so a team should check its own usage. unknown","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["azure","azurecli","ci","high","package"],"campaign_type":null,"search_a":"'-109457':14A,17A '-2026':13A,16A 'author':8A 'azur':1A 'cli':2A 'code':11A 'command':4A 'cve':12A,15A 'inject':5A 'let':6A 'os':3A 'run':10A 'user':9A","search_b":"'abus':48B 'access':53B 'attack':50B 'azur':18B,20B,24B 'azure-c':19B 'charact':30B 'ci':22B 'cli':21B,25B 'code':56B 'command':38B,44B 'flaw':41B 'handl':45B 'input':32B 'network':59B 'neutral':28B 'oper':36B 'packag':23B 'pass':33B 'run':55B 'special':29B 'system':37B 'valid':52B","search_c":"'allow':76C 'attack':79C 'author':78C 'azur':74C 'cli':75C 'code':82C 'command':69C,71C 'element':64C 'execut':81C 'improp':60C 'inject':72C 'network':85C 'neutral':61C 'os':68C,70C 'special':63C 'use':65C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:18:14+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-109457","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109457","severity":null,"published_at":"2026-11-10T19:18:14+00:00","modified_at":"2026-11-10T19:18:14+00:00","first_seen_at":"2026-11-10T19:24:23+00:00","fetched_at":"2026-11-10T19:24:23+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}