The vulnerability identified as ZDI-26-226 affects the azure-cli-mcp component of Microsoft Azure. It results from insufficient validation of a user-supplied string used in a system call, enabling remote attackers to execute arbitrary code without authentication. The flaw allows code execution in the context of the MCP server. The Zero Day Initiative assigned a CVSS score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The vendor acknowledged the report and rated the severity as Moderate but no patch or fix has been publicly disclosed. The advisory suggests restricting interaction with the product as the primary mitigation.

Successful exploitation allows remote attackers to execute arbitrary code on affected Microsoft Azure installations without authentication, potentially leading to full system compromise. The vulnerability impacts confidentiality, integrity, and availability with high severity as indicated by the CVSS score of 9.8. No known exploits are currently observed in the wild.

No official patch or fix has been confirmed or published by the vendor as of the advisory date. The vendor rated the severity as Moderate but has not provided remediation guidance. The advisory recommends restricting interaction with the affected azure-cli-mcp component to mitigate risk. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.