CRITICALCVSS 9.8EPSS 2.6%

CVE-2026-21531

Azure AI Language Authoring Elevation of Privilege Vulnerability can Lead to RCE

Published: 2026-02-10
Modified: 2026-10-27
EPSS percentile: 85%
Aliases: GHSA-436v-jg82-p533
Sources: github-advisory

Summary

Deserialization of untrusted data in the Azure AI Language Conversations Authoring client library for Python allows an unauthorized attacker to execute code over a network.

Affected packages

Ecosystem	Package	Affected versions	Fixed versions
PyPI	azure-ai-language-conversations-authoring	—	1.0.0b4

Remediation: Upgrade to 1.0.0b4 or later.

References

https://github.com/advisories/GHSA-436v-jg82-p533

Includes data from the GitHub Advisory Database, licensed under CC-BY 4.0.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.

EPSS scores provided by the FIRST.org Exploit Prediction Scoring System.