{"id":"CVE-2025-24986","aliases":["GHSA-gprr-v9f2-px3c","PYSEC-2026-1804"],"title":"Azure PromptFlow remote code execution related to Jinja templates","summary":"Azure PromptFlow remote code execution related to Jinja templates","severity":"medium","cvss":6.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","vendor":"promptflow-tools","product":"promptflow-tools","ecosystem":"pip","affected":["promptflow-tools < 1.6.0","promptflow-core < 1.17.2"],"patched":["promptflow-tools 1.6.0","promptflow-core 1.17.2"],"published":"2025-03-11","updated":"2026-07-07","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/GHSA-gprr-v9f2-px3c","references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-24986"},{"url":"https://github.com/microsoft/promptflow/commit/5f4a41ab4cb15607ade7f26138b0b863b4e4eb0a"},{"url":"https://github.com/microsoft/promptflow/commit/625061724c51533d28fe6e0e3014b1042afdb07f"},{"url":"https://github.com/microsoft/promptflow"},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24986"}],"tags":["osv","pip"],"epss":0.00528,"epssPercentile":0.4368,"ingestedAt":"2026-07-08T18:25:49.763Z","slug":"CVE-2025-24986","body":"## Overview\n\nImproper isolation or compartmentalization in Azure PromptFlow allows an unauthorized attacker to execute code over a network.\n\n## Affected packages\n\n- `promptflow-tools < 1.6.0`\n- `promptflow-core < 1.17.2`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `promptflow-tools 1.6.0`\n- `promptflow-core 1.17.2`","depth":"sunlit","depthScore":36,"depthScoreParts":{"impact":35.8,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}