Remote Code Execution Vulnerability in Microsoft Power Apps

CVE-2026-32172

What is CVE-2026-32172?

A remote code execution vulnerability exists in Microsoft Power Apps due to an uncontrolled search path element. This flaw could enable unauthorized attackers to execute arbitrary code over a network, posing significant risks to the integrity and confidentiality of systems leveraging this platform. Users are advised to implement recommended security measures and apply patches provided by Microsoft to mitigate this threat. For detailed guidance, refer to the vendor's advisory.

References