CVE-2024-43591 Azure Command Line Integration (CLI) Elevation of Privilege Vulnerability

High 8.7 Published 8 Oct 2024 Updated 19 Aug 2026

Attackers can exploit a command injection flaw in Azure CLI to escalate privileges on the local system.

Exploited in the wild: Not known
Login needed: An administrator
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2024-43591?

CVE-2024-43591 is a high-severity command injection vulnerability in Microsoft Azure CLI, published on 8 Oct 2024. An attacker needs administrator access to exploit it, with no action from the victim.

Official description

Azure Command Line Integration (CLI) Elevation of Privilege Vulnerability

Weakness: CWE-77

Which versions are affected by CVE-2024-43591?

1 open source package ship an affected version, including azure-cli. It affects 2 products.

Package	Affected	Fixed in
`azure-cli` Bitnami	All versions	`2.65.0`

Linux distribution packages (6)

`azure-cli` SUSE:Linux Enterprise Module for Public Cloud 15 SP4	All versions	`2.58.0-150400.14.12.1`
`azure-cli` SUSE:Linux Enterprise Module for Public Cloud 15 SP5	All versions	`2.58.0-150400.14.12.1`
`azure-cli` SUSE:Linux Enterprise Module for Public Cloud 15 SP6	All versions	`2.58.0-150400.14.12.1`
`azure-cli-test` SUSE:Linux Enterprise Module for Public Cloud 15 SP6	All versions	`2.58.0-150400.14.12.1`
`azure-cli` openSUSE:Leap 15.6	All versions	`2.58.0-150400.14.12.1`
`azure-cli-test` openSUSE:Leap 15.6	All versions	`2.58.0-150400.14.12.1`

Products include Microsoft Azure Command-Line Interface, Microsoft Azure Service Connector.

How do I fix CVE-2024-43591?

Upgrade azure-cli to 2.65.0 or later.

Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.

Is CVE-2024-43591 being exploited?

There is no known exploitation of CVE-2024-43591 in the wild and no public exploit code.

Sources

Also known as BIT-azure-cli-2024-43591, GHSA-c675-7cfx-698p, SUSE-SU-2025:0751-1, UBUNTU-CVE-2024-43591.