CVE-2025-29819

Summary

External control of file name or path in Azure Portal Windows Admin Center allows an unauthorized attacker to disclose information locally.

Affected Software

VendorProductVersion RangeStatus
MicrosoftWindows Admin Center1809.0 < 2.4.2.1affected
MicrosoftWindows Admin Center in Azure Portal1.0 < 0.45.0.0affected

Weaknesses

  • CWE-73: CWE-73: External Control of File Name or Path

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References