Microsoft Azure Core Shared Client Library for Python Remote Code Execution Vulnerability

Vulnerability

A remote code execution vulnerability has been identified in the Azure Core shared client library for Python. This issue arises from the deserialization of untrusted data, allowing an authorized attacker to execute code over a network. The vulnerability affects version 1.38.0 of the library.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected system.

Remediation

Users can download the security update for the Azure Core shared client library for Python, version 1.38.0, from the official GitHub repository.

Added: Jan 13, 2026, 9:19 PM
Updated: Jan 13, 2026, 9:19 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
2.5
exploitability
5.2
remediation
0.0
relevance
2.0
threat
0.1
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.