Headline
CVE-2022-23254: Microsoft Power BI Elevation of Privilege Vulnerability
What actions do I need to take to be protected from this vulnerability?
The main update will be automatically pushed to all affected products and services.
We recommend that customers update PowerBI Client JS SDK to version 2.19.1. The package can be downloaded from NPM or NuGet Gallery.
How do I know if I am affected?
Our team will contact customers that are affected by this vulnerability.
We recommend that affected customers save their Power Apps to ensure the fix takes effect as expected.