Azure DevOps Server Elevation of Privilege Vulnerability

Summary

Vulnerabilities 1

• Critical 9.0
  CVE-2025-47158

  Azure DevOps Server Elevation of Privilege Vulnerability

  Authentication bypass by assumed-immutable data in Azure DevOps allows an unauthorized attacker to elevate privileges over a network.

  Microsoft Azure DevOps
  Jul 18, 2025

Revision history

1. 2025-07-18 #1

   Information published.

References

• CVE-2025-47158 Azure DevOps Server Elevation of Privilege Vulnerability - HTML
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-47158
• Microsoft Exploitability Index
  https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
• Microsoft Support Lifecycle
  https://support.microsoft.com/lifecycle
• Common Vulnerability Scoring System
  https://www.first.org/cvss