CVE-2026-69877: Azure DevOps Information Disclosure Vulnerability
Published Oct 13, 2026
·Updated
Azure DevOps Information Disclosure Vulnerability
Other sources
Origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a network.
— Microsoft
Affected Software
3 affected componentsFixes available
Microsoft Azure DevOps
Microsoft Azure DevOps CLI Extension<1.0.7
1.0.7
Microsoft Azure CLI<1.0.7
1.0.7
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 1.0.7
Event History
Oct 13, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeaknessAffected Software
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
DescriptionSeverity
Data Sourced
via NVD·07:19 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Does exploitation require an attacker to authenticate or have existing permissions?
No. The vector indicates no privileges are required, and the attack can be conducted over a network. Exploitation does require user interaction.
2
What is the expected security impact if exploitation succeeds?
The reported impact is high confidentiality impact. No integrity or availability impact is indicated in the supplied vector.