Live › vulnerability › CVE-2026-21531
Go to dashboardThe Azure AI Language Conversations Authoring client library for Python deserializes untrusted data without checks. An unauthorized attacker can send crafted input over the network and execute code.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 15:23 UTC, 0h before NVD. All times on this page are UTC.
Any application that imports the Azure AI Language Conversations Authoring Python client and sends it data that can come from outside the trust boundary is exposed. Teams that do not install this package, or that only call the service with fixed, trusted inputs, can skip it, though the upgrade is still cheap.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| azure-ai-language-conversations-authoring | pypi | < 1.0.0b4 | 1.0.0b4 |
| microsoft azure conversation authoring client library | vendor | = 1.0.0 | – |
pip show azure-ai-language-conversations-authoring and confirm the installed version is below 1.0.0b4azure-ai-language-conversations-authoring to find pinned versionsazure-ai-language-conversations-authoring to 1.0.0b4 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Deserialization of untrusted data in the Azure AI Language Conversations Authoring client library for Python allows an unauthorized attacker to execute code over a network.
This page as .md · .json · in your agent: get_signal("CVE-2026-21531")
GitHub Advisory Database, CC-BY 4.0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.