CVE-2026-108744: pbi-cli 3.10.1 through 3.12.0 OS Command Injection via Desktop Sync
pbi-cli 3.10.1 through 3.12.0 contains an OS command injection vulnerability in desktopsync.py that passes unquoted .pbip paths to cmd /c start when reopening projects. Attackers can lure victims into opening a Power BI project from a space-free path containing & to run commands with victim privileges during report write or reload.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to exploitation?
Users running pbi-cli 3.10.1 through 3.12.0 on systems where they open a Power BI project supplied or positioned by an attacker are exposed. Successful exploitation runs commands with the privileges of the victim.
What conditions are required for an attacker to exploit this issue?
The attacker must lure the victim into opening a Power BI project from a space-free path containing an ampersand (&). The vulnerable desktop-sync workflow must then reopen the .pbip project during a report write or reload.
Is user interaction required?
Yes. The victim must be induced to open the maliciously located Power BI project; the CVSS vector also identifies user interaction as required.
What can be done if updating is not immediately possible?
Avoid opening or syncing .pbip projects from untrusted paths, especially paths containing an ampersand (&). Use project directories with trusted, space-free names that do not include shell metacharacters until the affected version is replaced.