Microsoft Power Apps Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in Microsoft Power Apps. This issue arises from improper authorization, allowing an authorized attacker to execute code over a network. The vulnerability affects several different versions of Power Apps.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected system.

Reproduction

To reproduce this vulnerability, an authorized attacker must send a specially crafted shared app to a user. Once the user opens the app, the attacker's code is executed remotely.

Remediation

Users can download the security update for Microsoft Power Apps from the Microsoft Power Platform released versions page.