This vulnerability (CVE-2024-43591) in Microsoft Azure CLI is due to improper neutralization of special elements in commands, leading to command injection (CWE-77). It allows an attacker with high privileges to elevate their privileges further by injecting malicious commands. The vulnerability affects Azure CLI version 2.0.0. Microsoft has issued an official fix and manages remediation for this cloud-hosted service. The CVSS 3.1 score is 8.7, indicating high severity, with network attack vector, low attack complexity, and no user interaction required.

Successful exploitation can lead to elevation of privilege within the Azure CLI environment, potentially allowing an attacker to execute arbitrary commands with elevated rights. This can compromise the integrity and availability of the affected system. There is no confidentiality impact reported. No known active exploits have been observed.

An official fix is available from Microsoft. Since Azure CLI is a cloud service, Microsoft manages the remediation server-side. Users should ensure their Azure CLI environment is updated to the fixed version as per Microsoft's guidance. No additional action is required beyond applying the official fix.