CVE-2025-26627

Summary

CVE-2025-26627 is a command injection vulnerability affecting Azure Arc. Maliciously crafted inputs can bypass neutralization mechanisms, allowing an attacker with authorized access to execute arbitrary commands locally, thereby elevating privileges within the Azure Arc environment. This issue poses a significant risk to the security of Azure Arc deployments, as it enables attackers to gain unauthorized control over systems and potentially compromise sensitive data. Organizations using Azure Arc are strongly advised to apply the available patch as soon as possible to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.