MSRC-CVE-2025-24986 — Azure Promptflow Remote Code Execution Vulnerability

Summary

Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

According to the CVSS metrics, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L), and integrity (I:L) but lead to no loss of availability (A:N). What is the impact of this vulnerability?
While an attacker can access some data, that data is not customer’s data, or any highly sensitive/critical information; furthermore an attacker cannot affect the availability of the product.

Security updates
1.17.2 — https://microsoft.github.io/promptflow/reference/changelog/promptflow-core.html#v1-17-2-2025-1-23
1.6.0 — https://pypi.org/project/promptflow-tools/1.6.0/

Vulnerabilities 1

Medium 6.5

CVE-2025-24986

Azure Promptflow Remote Code Execution Vulnerability

Improper isolation or compartmentalization in Azure PromptFlow allows an unauthorized attacker to execute code over a network.

Microsoft Azure promptflow-tools Azure promptflow-core promptflow-tools PyPI

Mar 11, 2025

Revision history

2025-03-11 #1
Information published.

References

CVE-2025-24986 Azure Promptflow Remote Code Execution Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24986
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss