-
Notifications
You must be signed in to change notification settings - Fork 5.3k
Open
Labels
area-InfrastructureuntriagedNew issue has not been triaged by the area ownerNew issue has not been triaged by the area owner
Description
Description
After installing the latest updates the build is now blocking with the following prompt:
Security Warning: Script Execution Risk
Invoke-WebRequest parses the content of the web page. Script code in the web page might be run when the page is
parsed.
RECOMMENDED ACTION:
Use the -UseBasicParsing switch to avoid script code execution.
Do you want to continue?
Seems to be related to https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-54100.
Answering "No" to the prompt does allow the build to proceed.
Reproduction Steps
Install latest updates on windows, including fix for abovementioned CVE.
build runtime from the root.
Expected behavior
Build proceeds without waiting for user input.
Actual behavior
Build blocked on prompt
Regression?
Yes, seems to be caused by powershell fix - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-54100
Known Workarounds
Answer "N" to prompt to continue build.
This may not have hit our build machines yet, but we need to get it fixed ASAP because it would block systems without users attached.
Configuration
No response
Other information
No response
Metadata
Metadata
Assignees
Labels
area-InfrastructureuntriagedNew issue has not been triaged by the area ownerNew issue has not been triaged by the area owner
Type
Projects
Status
No status