{"id":"CVE-2026-109467","kind":"vulnerability","aliases":["CVE-2026-109467"],"related":[],"title":"Azure DevOps: a user with Project Reader access can trigger pipeline execution and run code on agents","description":"Improper authentication in Azure DevOps allows an authorized attacker to execute code over a network.","summary":"Microsoft (MSRC, 10 Nov 2026) rates this Azure DevOps improper-authentication flaw CVSS 9.9, Important, not exploited and not publicly disclosed. Per MSRC's FAQ, an attacker with Project Reader access to an affected organization can send a crafted network request that triggers unauthorized pipeline execution and runs code on pipeline agents. The MSRC record lists no affected versions and no fixed build; the title says Azure DevOps Server, the description just says Azure DevOps.","severity":"critical","cvss":9.9,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["azure-devops","pipelines","self-hosted","vendor"],"not_affected_if":[],"how_to_check":"Unknown: MSRC lists no affected builds yet. If you run Azure DevOps Server, note your installed patch level (Azure DevOps Server release notes) and watch the MSRC page for CVE-2026-109467 for the fixed patch; review who holds Project Reader access and pipeline agent permissions.","fix":null,"status":"open","published_at":"2026-11-10T19:18:15+00:00","first_seen_at":"2026-11-10T19:24:24+00:00","triaged_at":"2026-11-10T19:25:32+00:00","updated_at":"2026-11-10T19:38:10+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-11-10T19:25:32Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Azure DevOps: improper authentication lets an authorized user run code remotely","impact":"high","summary":"Azure DevOps has an improper authentication flaw that lets an authorized attacker execute code over the network. The sources give a CVSS score of 9.9 but name no affected versions or fix.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["azure-devops","self-hosted"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"attacker runs code on the server over the network","analyst_note":"Find the Microsoft advisory for CVE-2026-109467 to confirm affected products, versions, and the fixed release.","how_to_check":"- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Teams that run Azure DevOps Server or use Azure DevOps services with accounts that can reach the affected feature. The sources do not say which deployments or versions are affected, so the scope is unknown.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.00065,"input_tokens":4477,"output_tokens":405,"severity_before":"critical"},"analyst_status":"done","analyst_note":"Find the Microsoft advisory for CVE-2026-109467 to confirm affected products, versions, and the fixed release.","search":"'-109467':20A,23A '-2026':19A,22A '10':34B '2026':36B '9.9':46B 'access':8A,63B 'affect':66B,90B 'agent':17A,84B 'allow':113C 'attack':59B,116C 'authent':43B,109C 'author':115C 'azur':1A,25B,39B,99B,106B,111C 'azure-devop':24B 'build':95B 'code':15A,81B,119C 'craft':71B 'cve':18A,21A 'cvss':45B 'descript':103B 'devop':2A,26B,40B,100B,107B,112C 'disclos':53B 'execut':12A,78B,118C 'exploit':49B 'faq':57B 'fix':94B 'flaw':44B 'host':30B 'import':47B 'improp':42B,108C 'improper-authent':41B 'list':88B 'microsoft':32B 'msrc':33B,55B,86B 'network':72B,122C 'nov':35B 'organ':67B 'per':54B 'pipelin':11A,27B,77B,83B 'project':6A,61B 'public':52B 'rate':37B 'reader':7A,62B 'record':87B 'request':73B 'run':14A,80B 'say':98B,105B 'self':29B 'self-host':28B 'send':69B 'server':101B 'titl':97B 'trigger':10A,75B 'unauthor':76B 'user':4A 'vendor':31B 'version':91B","nicknames":[],"mitigations":[],"who_affected":"Teams running Azure DevOps Server, or Azure DevOps organizations, where people hold Project Reader access and pipelines run on agents. MSRC's record does not list affected versions or whether Services (cloud) is included, so scope beyond Server is unconfirmed. Teams without Azure DevOps can skip it.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["azuredevops","critical","pipelines","selfhosted","vendor"],"campaign_type":null,"search_a":"'-109467':20A,23A '-2026':19A,22A 'access':8A 'agent':17A 'azur':1A 'code':15A 'cve':18A,21A 'devop':2A 'execut':12A 'pipelin':11A 'project':6A 'reader':7A 'run':14A 'trigger':10A 'user':4A","search_b":"'10':34B '2026':36B '9.9':46B 'access':63B 'affect':66B,90B 'agent':84B 'attack':59B 'authent':43B 'azur':25B,39B,99B,106B 'azure-devop':24B 'build':95B 'code':81B 'craft':71B 'cvss':45B 'descript':103B 'devop':26B,40B,100B,107B 'disclos':53B 'execut':78B 'exploit':49B 'faq':57B 'fix':94B 'flaw':44B 'host':30B 'import':47B 'improp':42B 'improper-authent':41B 'list':88B 'microsoft':32B 'msrc':33B,55B,86B 'network':72B 'nov':35B 'organ':67B 'per':54B 'pipelin':27B,77B,83B 'project':61B 'public':52B 'rate':37B 'reader':62B 'record':87B 'request':73B 'run':80B 'say':98B,105B 'self':29B 'self-host':28B 'send':69B 'server':101B 'titl':97B 'trigger':75B 'unauthor':76B 'vendor':31B 'version':91B","search_c":"'allow':113C 'attack':116C 'authent':109C 'author':115C 'azur':111C 'code':119C 'devop':112C 'execut':118C 'improp':108C 'network':122C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:18:15+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-109467","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109467","severity":null,"published_at":"2026-11-10T19:18:15+00:00","modified_at":"2026-11-10T19:18:16+00:00","first_seen_at":"2026-11-10T19:24:24+00:00","fetched_at":"2026-11-10T19:24:24+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-109467:2529","url":"https://api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/CVE-2026-109467","severity":null,"published_at":"2026-11-10T19:38:10+00:00","modified_at":"2026-11-10T19:38:10+00:00","first_seen_at":"2026-11-10T19:38:10+00:00","fetched_at":"2026-11-10T19:38:10+00:00","note":"MSRC SUG API record read (primary, JSON); no versions/fix listed, so fix and check left unknown, nothing verified. Revisit when MSRC adds the patch/build. Browser page rendered empty.","cites":["https://api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/CVE-2026-109467"]}],"documents":[{"id":117601,"url":"https://api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/CVE-2026-109467","title":"MSRC: CVE-2026-109467 Azure DevOps Server Remote Code Execution Vulnerability","kind":"advisory","source":"analyst","publisher":null,"text":"Improper authentication in Azure DevOps allows an authorized attacker to execute code over a network. CWE-287. Severity Important, CVSS 9.9 (temporal 8.6), vector AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L. Exploited: No. Publicly disclosed: No. FAQ: An attacker with Project Reader access to an affected Azure DevOps organization could send a specially crafted network request to trigger unauthorized pipeline execution, allowing code execution on pipeline agents. No user interaction. Customer action required: true. Released 2026-11-10. No affected versions or fixed build listed in the API record.","published_at":null,"relation":"advisory","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}