CVE-2025-29807 Overview
CVE-2025-29807 is a deserialization of untrusted data vulnerability [CWE-94] in Microsoft Dataverse. The flaw allows an authenticated attacker to execute arbitrary code over a network. Microsoft Dataverse is the underlying data platform for Power Platform applications, including Power Apps and Dynamics 365, which makes successful exploitation impactful for tenants running business-critical workloads.
The vulnerability requires low privileges and no user interaction. Network-based exploitation can yield high impact to confidentiality, integrity, and availability of the affected service.
Critical Impact
Authenticated attackers can achieve remote code execution on Microsoft Dataverse, exposing business data and downstream Power Platform workloads to compromise.
Affected Products
- Microsoft Dataverse (cloud service)
- Power Platform applications backed by Dataverse
- Dynamics 365 environments using Dataverse storage
Discovery Timeline
- 2025-03-21 - CVE-2025-29807 published to the National Vulnerability Database
- 2025-07-03 - Last updated in NVD database
Technical Details for CVE-2025-29807
Vulnerability Analysis
The vulnerability stems from insecure deserialization of untrusted data within Microsoft Dataverse. When a service deserializes attacker-controlled input without validating the object graph, it can instantiate types and invoke methods that lead to arbitrary code execution. Microsoft classifies this issue under [CWE-94] Improper Control of Generation of Code.
Dataverse exposes APIs and processing pipelines that accept serialized payloads from authenticated principals. An attacker who already holds a valid identity in the target environment can craft a malicious serialized object that the server reconstructs into executable instructions during processing.
The EPSS exploit probability is 1.146% (62.5 percentile) as recorded in the enriched dataset, and no public proof-of-concept exploit is currently listed. Microsoft has not flagged the issue as exploited in the wild, and it is not on the CISA Known Exploited Vulnerabilities catalog.
Root Cause
The root cause is unsafe handling of serialized objects by a Dataverse component. Type filtering or binder restrictions during deserialization are insufficient, allowing gadget chains to execute during object reconstruction. Microsoft has not published low-level technical details beyond the advisory.
Attack Vector
Exploitation occurs over the network against Dataverse endpoints. The attacker must be authenticated with low-level privileges in the target tenant or environment. No user interaction is required, and the scope remains unchanged after exploitation, which means the code runs within the security context of the Dataverse service.
The vulnerability is described in the Microsoft Security Update Guide. No verified exploit code is publicly available at the time of writing.
Detection Methods for CVE-2025-29807
Indicators of Compromise
- Unexpected child processes or scripted activity originating from Dataverse or Power Platform service identities.
- Anomalous outbound network connections from environments hosting Dataverse workloads to attacker-controlled infrastructure.
- Audit log entries showing unusual API calls with large or binary-serialized payloads to Dataverse endpoints.
Detection Strategies
- Monitor Microsoft Purview and Power Platform admin audit logs for irregular use of plug-in registration, custom workflow activities, or service-to-service API calls.
- Alert on authenticated principals issuing high volumes of API requests carrying serialized .NET payloads or unusual content types.
- Correlate identity sign-ins from atypical locations with Dataverse administrative actions performed by low-privilege accounts.
Monitoring Recommendations
- Enable Microsoft 365 unified audit logging and forward Power Platform logs to a centralized SIEM for retention and correlation.
- Review the Power Platform Center of Excellence (CoE) starter kit telemetry for anomalous app, flow, or connector usage.
- Track privileged role assignments in the affected environments and alert on new system administrator grants.
How to Mitigate CVE-2025-29807
Immediate Actions Required
- Confirm that your Dataverse environments are running the latest Microsoft-deployed service version, as referenced in the Microsoft Security Update Guide.
- Review and tighten role assignments in affected environments to remove unnecessary low-privilege accounts that could be abused for exploitation.
- Rotate credentials and application secrets for any service principals with access to Dataverse APIs.
Patch Information
Microsoft addressed CVE-2025-29807 through a service-side update to Microsoft Dataverse. Because Dataverse is delivered as a cloud service, the fix is applied by Microsoft and does not require customer-installed binaries. Customers should validate via the Microsoft Security Update Guide that their tenants are running the remediated build and review any environment-specific guidance from Microsoft.
Workarounds
- Restrict Dataverse API access using conditional access policies and IP-based network restrictions where supported.
- Apply the principle of least privilege to all Power Platform security roles and remove dormant or unused accounts.
- Disable or restrict custom plug-ins and code components in sensitive environments until patch confirmation is complete.
Disclaimer: This content was generated using AI. While we strive for accuracy, please verify critical information with official sources.
