Microsoft Data Formulator Remote Code Execution Vulnerability

A code injection vulnerability has been identified in Microsoft Data Formulator, allowing unauthorized attackers to execute code remotely over a network. This issue arises from improper control of code generation, which could be exploited by manipulating user-supplied input that is processed by the affected application.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected system.

Remediation

Users can download the security update for Microsoft Data Formulator from the Python Package Index (PyPI).