CVE Catalog
CVE-2025-65037
CriticalSummary
Improper control of generation of code ('code injection') in Azure Container Apps allows an unauthorized attacker to execute code over a network.
Risk Assessment
Risk of remote code execution in the Azure Container Apps environment, potentially leading to container takeover and application data compromise.
Recommendation
Apply patches provided by Microsoft and restrict access to Azure Container Apps.
Original NVD description (English source)
Improper control of generation of code ('code injection') in Azure Container Apps allows an unauthorized attacker to execute code over a network.