CVE-2023-36437: Microsoft Azure Pipelines Agent

High severity, CVSS 8.8. EPSS: 2% chance of exploitation in the next 30 days.

Azure DevOps Server Remote Code Execution Vulnerability

Affected products

• Microsoft Azure Pipelines Agent: before 2.39.1 (fixed in 2.39.1)

Published 2023-11-14. Last modified 2026-06-17.