GHSA-436v-jg82-p533

Azure AI Language Authoring Elevation of Privilege Vulnerability can Lead to RCE

Source: GitHub Advisory Database (reviewed) Critical CVE-2026-21531

Packages

Ecosystem	Package	Affected	Fixed in
PyPI	azure-ai-language-conversations-authoring	< 1.0.0b4	1.0.0b4

Details

As written in the advisory (Markdown source, shown as plain text).

Deserialization of untrusted data in the Azure AI Language Conversations Authoring client library for Python allows an unauthorized attacker to execute code over a network.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2026-21531 advisory
https://github.com/Azure/azure-sdk-for-python package
https://github.com/pypa/advisory-database/tree/main/vulns/azure-ai-language-conversations-authoring/PYSEC-2026-289.yaml web
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21531 web
https://pypi.org/project/azure-ai-language-conversations-authoring web