Unauthorized command execution via ACR Task run (secret-task)

Emiliano Mema@Nosalva

•updated Jul 16, 2026•5•0•12

Detects the execution of tasks within Azure Container Registry that involve sensitive strings or potential credential-related patterns in the task configuration, such as 'secret-task', 'acb_step_0', or specific flag references, which may indicate testing or exploitation of container build pipelines.