MEDIUM5.5
PYSEC-2026-1209
Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability
Quick fix
PYSEC-2026-1209 — azure-identity: upgrade to the fixed version with the command below.
pip install --upgrade 'azure-identity>=1.16.1'Details
Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability.
Are you affected?
Enter the version of the package you're using.
Affected packages
PyPI/azure-identity
Introduced in:
0Fixed in: 1.16.1Fix
pip install --upgrade 'azure-identity>=1.16.1'References
- https://nvd.nist.gov/vuln/detail/CVE-2024-35255[ADVISORY]
- https://github.com/AzureAD/microsoft-authentication-library-for-dotnet/issues/4806#issuecomment-2178960340[WEB]
- https://github.com/Azure/azure-sdk-for-go/commit/50774cd9709905523136fb05e8c85a50e8984499[WEB]
- https://github.com/Azure/azure-sdk-for-java/commit/5bf020d6ea056de40e2738e3647a4e06f902c18d[WEB]
- https://github.com/Azure/azure-sdk-for-js/commit/c6aa75d312ae463e744163cedfd8fc480cc8d492[WEB]
- https://github.com/Azure/azure-sdk-for-net/commit/9279a4f38bf69b457cfb9b354f210e0a540a5c53[WEB]
- https://github.com/Azure/azure-sdk-for-python/commit/cb065acd7d0f957327dc4f02d1646d4e51a94178[WEB]
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35255[WEB]
- https://pypi.org/project/azure-identity[PACKAGE]
- https://github.com/advisories/GHSA-m5vv-6r4h-3vj9[ADVISORY]