The Jenkins Azure CLI Plugin version 0.9 and earlier allows users with Item/Configure permission to execute arbitrary shell commands on the Jenkins controller due to lack of command execution restrictions. This vulnerability is identified as CVE-2025-64140 and has a high severity score of 8.8. No fix is currently available for this issue.