services / Azure / Container registry tasks

ACR tasks are build/run automation definitions (triggers, steps, base images, identity references) that execute container build and command workloads for an Azure Container Registry, forming the registry's CI/build pipeline.

Tasks frequently run under an assigned managed identity and embed source-control and registry credentials, making them a supply-chain and lateral-movement vector.

Microsoft.​ContainerRegistry/​registries/​tasks/​listDetails/​action

listDetails returns the full task definition including embedded source-control tokens, custom registry credentials, and secret build arguments, exposing reusable credential material that enables pivoting to connected systems.

Risks

1. Cryptographic exfiltration (CRITICAL)
2. Lateral movement (BOOST)

Scope: CRITICAL

This privilege may grant access to sensitive data from a significant fraction of organizational functions, allow interruption of critical organizational services, or its exploit could lead to significant privilege escalation.

Links