Microsoft Data Formulator code injection vulnerability

Microsoft Data Formulator is an AI data visualization and analysis tool developed by Microsoft Corporation in the United States, powered by large language models. There is a security vulnerability in Microsoft Data Formulator. Attackers can exploit this vulnerability to execute code remotely...

The vulnerability of Microsoft Data Formulator’s AI-based data visualization tool, related to improper code generation management, allows a malicious actor to execute arbitrary code.

The vulnerability of the Microsoft Data Formulator, a tool for visualizing data based on artificial intelligence, is related to improper code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

CVE-2026-41094

Improper control of generation of code 'code injection' in Microsoft Data Formulator allows an unauthorized attacker to execute code over a network...

EUVD-2026-29682

Improper control of generation of code 'code injection' in Microsoft Data Formulator allows an unauthorized attacker to execute code over a network...

CVE-2026-41094

Improper control of generation of code 'code injection' in Microsoft Data Formulator allows an unauthorized attacker to execute code over a network...

vulnerabilities handled in Microsoft Developer Tools

Microsoft has addressed vulnerabilities in various Developer Tools. A malicious individual could exploit these vulnerabilities to carry out attacks that can cause the following types of damage: - Denial-of-Service DoS attacks - Bypass of security measures - Execution of arbitrary code user rights...

CVE-2026-41094

Improper control of generation of code 'code injection' in Microsoft Data Formulator allows an unauthorized attacker to execute code over a network...

CVE-2026-41094

CVE-2026-41094: Improper control of generation of code ('code injection') in Microsoft Data Formulator enables an unauthenticated attacker to execute code over a network. Base CVSS v3.1 score 8.8 (High) with network access, no privileges, user interaction required. Exploitation status is not deta...

CVE-2026-41094 Microsoft Data Formulator Remote Code Execution Vulnerability

...

Microsoft Data Formulator Remote Code Execution Vulnerability

Improper control of generation of code 'code injection' in Microsoft Data Formulator allows an unauthorized attacker to execute code over a network...

Microsoft Data Formulator 代码注入漏洞

Microsoft Data Formulator is an AI data visualization and analysis tool developed by Microsoft Corporation in the United States, powered by large language models. Microsoft Data Formulator has a code injection vulnerability. Attackers can exploit this vulnerability to execute code remotely...

PT-2026-40235

Name of the Vulnerable Software and Affected Versions Microsoft Data Formulator affected versions not specified Description Improper control of code generation in the AI data visualization feature allows an unauthorized attacker to execute code over a network. This issue occurs when uploaded data...

CVE-2026-41094: Improper Control of Generation of Code

Improper control of generation of code 'code injection' in Microsoft Data Formulator allows an unauthorized attacker to execute code over a network...