CVE-2026-44641
2 advisories.
PyPI/apm-cli CVE-2026-44641: high 7.1, EPSS 0.53%
Microsoft APM CLI's plugin.json component paths escape plugin root and copy arbitrary host files during install
Action: Upgrade apm-cli to 0.8.12 or later.
pip install apm-cli==0.8.12Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.8.12 | - |
Fixed versions
| 0.8.12 |
Sources
- osv: GHSA-xhrw-5qxx-jpwr
- https://github.com/microsoft/apm/security/advisories/GHSA-xhrw-5qxx-jpwr
- https://nvd.nist.gov/vuln/detail/CVE-2026-44641
- https://github.com/microsoft/apm
CVE-2026-44641 · published · modified · JSON
PyPI/apm-cli CVE-2026-44641: high 7.1, EPSS 0.53%
Microsoft APM CLI's plugin.json component paths escape plugin root and copy arbitrary host files during install
Action: Upgrade apm-cli to 0.8.12 or later.
pip install apm-cli==0.8.12Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.8.12 | - |
Fixed versions
| 0.8.12 |
Sources
- osv: PYSEC-2026-2379
- https://github.com/microsoft/apm/security/advisories/GHSA-xhrw-5qxx-jpwr
- https://nvd.nist.gov/vuln/detail/CVE-2026-44641
- https://github.com/microsoft/apm
- https://pypi.org/project/apm-cli
- https://github.com/advisories/GHSA-xhrw-5qxx-jpwr
CVE-2026-44641 · published · modified · JSON