CVE-2026-26145

An improper access control vulnerability in Azure Synapse allows an authorized attacker to elevate privileges over a network. The issue affects authorization mechanisms in Microsoft's analytics service.

An authorized attacker could gain elevated privileges, potentially taking control of resources or data within the Azure Synapse environment, posing a serious risk to data confidentiality and integrity.

Apply security updates provided by Microsoft for Azure Synapse immediately and review access control configurations to mitigate the risk of privilege escalation.