CVE-2022-39327

Azure CLI is the command-line interface for Microsoft Azure. In versions previous to 2.40.0, Azure CLI contains a vulnerability for potential code injection. Critical scenarios are where a hosting machine runs an Azure CLI command where parameter values have been provided by an external source. The vulnerability is only applicable when the Azure CLI command is run on a Windows machine and with any version of PowerShell and when the parameter value contains the `&` or `|` symbols. If any of these prerequisites are not met, this vulnerability is not applicable. Users should upgrade to version 2.40.0 or greater to receive a a mitigation for the vulnerability.

• CWE-94
• CWE-78

• https://github.com/Azure/azure-cli/pull/23514Exploit, Patch, Third Party Advisory
• https://github.com/Azure/azure-cli/pull/24015Patch, Third Party Advisory
• https://github.com/Azure/azure-cli/security/advisories/GHSA-47xc-9rr2-q7p4Exploit, Mitigation, Third Party Advisory
• https://github.com/Azure/azure-cli/pull/23514Exploit, Patch, Third Party Advisory
• https://github.com/Azure/azure-cli/pull/24015Patch, Third Party Advisory
• https://github.com/Azure/azure-cli/security/advisories/GHSA-47xc-9rr2-q7p4Exploit, Mitigation, Third Party Advisory

Published

Oct 25, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-39321GitHub Actions Runner is the application that runs a job fro…9.9
• CVE-2022-39322@keystone-6/core is a core package for Keystone 6, a content…9.8
• CVE-2022-39323GLPI stands for Gestionnaire Libre de Parc Informatique. GLP…9.8
• CVE-2022-39324Grafana is an open-source platform for monitoring and observ…3.5
• CVE-2022-39325BaserCMS is a content management system with a japanese lang…6.1
• CVE-2022-39326kartverket/github-workflows are shared reusable workflows fo…8.8
• CVE-2022-39328Grafana is an open-source platform for monitoring and observ…8.1
• CVE-2022-39329Nextcloud Server is the file server software for Nextcloud, …5.3
• CVE-2022-3933The Essential Real Estate WordPress plugin before 3.9.6 does…5.4
• CVE-2022-39330Nextcloud Server is the file server software for Nextcloud, …4.3
• CVE-2022-39331Nexcloud desktop is the Desktop sync client for Nextcloud. A…5.4
• CVE-2022-39332Nexcloud desktop is the Desktop sync client for Nextcloud. A…5.4