Open-source package vulnerability · PyPI
CVE-2026-21531: Azure AI Language Authoring Elevation of Privilege Vulnerability can Lead to RCE
criticalCVSS 3.1 9.8GHSA-436v-jg82-p533
Deserialization of untrusted data in the Azure AI Language Conversations Authoring client library for Python allows an unauthorized attacker to execute code over a network.
Published Feb 10, 2026 · Updated Feb 12, 2026
Affected packages
azure-ai-language-conversations-authoring
- Ecosystem
- PyPI
- Affected
- < 1.0.0b4
- Fixed in
- 1.0.0b4
- Check
pip show azure-ai-language-conversations-authoring
Advisory details
From the GitHub Advisory Database (CC BY 4.0).
Deserialization of untrusted data in the Azure AI Language Conversations Authoring client library for Python allows an unauthorized attacker to execute code over a network.
Credited to scottaddie.
References
How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology