---
id: "CVE-2026-119989"
page: "https://infrastack.ai/live/CVE-2026-119989"
kind: "vulnerability"
aliases: ["CVE-2026-119989"]
title: "Azure Pipelines: command injection lets an authorized user run code"
severity: "high"
cvss: 8.2
epss: null
exploited: false
status: "open"
category: "vendor"
products: []
ecosystems: []
tags: ["azure-devops", "azure-pipelines", "ci-cd", "cloud-service", "vendor"]
not_affected_if: []
published_at: "2026-11-10T19:20:24+00:00"
first_seen_at: "2026-11-10T19:25:06+00:00"
updated_at: "2026-11-10T22:10:00+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-119989", "first_seen_at": "2026-11-10T19:25:06+00:00"}, {"source": "analyst", "url": null, "first_seen_at": "2026-11-10T22:10:00+00:00"}]
exploit_sources: []
---

# Azure Pipelines: command injection lets an authorized user run code

Link for people: https://infrastack.ai/live/CVE-2026-119989 (this .md is for agents)

Microsoft lists a command injection (CWE-77) in Azure Pipelines that lets an authenticated user with low privileges run code over the network. CVSS 8.2, high attack complexity. No exploitation or public proof of concept found. Azure Pipelines is a Microsoft-run service; the MSRC page text could not be read, so fix details are unconfirmed. Teams that run builds on Azure Pipelines are the ones to look at; the attacker needs an authorized account.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

unknown: MSRC advisory text could not be read. Open https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119989 to see whether it names a customer action. Self-hosted agents and on-prem Azure DevOps Server are not confirmed affected.

## Timeline

- 2026-11-10T19:25:06+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-119989
- 2026-11-10T22:10:00+00:00 analyst — MSRC page is JS-only and returned no text; NVD page empty. Only aggregators (OpenCVE, administrator.de) seen: CVSS 3.1 8.2 AV:N/AC:H/PR:L/S:C, CWE-77, no exploitation reported. Their product row 'Azure Web Apps <2.10.0' looks like a mislabel, not used. Nothing verified.

## From the sources

Improper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows an authorized attacker to execute code over a network.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_