CVE-2025-24986
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Mar 11, 2025
CWE ID 653
Summary
CVE-2025-24986 is a cybersecurity vulnerability affecting Azure PromptFlow. This issue arises due to a lack of proper isolation or compartmentalization within the system. An attacker can exploit this vulnerability to execute code over a network, gaining unauthorized access and potentially causing significant damage. Organizations using Azure PromptFlow are urged to apply the necessary patches or updates to mitigate this risk. Failure to do so may result in serious security consequences.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.