← All advisories

Critical severity9.8NVD Advisory· Published Jun 5, 2025· Updated Jun 17, 2026

CVE-2025-47966

CVE-2025-47966

Description

Exposure of sensitive information to an unauthorized actor in Power Automate allows an unauthorized attacker to elevate privileges over a network.

Affected products

3

Microsoft/Power Automate For Desktop
cpe:2.3:a:microsoft:power_automate_for_desktop:-:*:*:*:*:*:*:*
Microsoft/Power Automatellm-fuzzy2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: -

Patches

Vulnerability mechanics

References

1

msrc.microsoft.com/update-guide/vulnerability/CVE-2025-47966nvdBroken Link

News mentions

0

No linked articles in our index yet.