CVE-2026-42823
CriticalSummary
Improper access control in Azure Logic Apps allows an authorized attacker to elevate privileges over a network.
Risk Assessment
An attacker with appropriate permissions may gain access to resources they should not have access to, potentially leading to serious security breaches.
Recommendation
It is recommended to review and strengthen access control mechanisms in Azure Logic Apps to prevent unauthorized privilege escalation.
Other vulnerabilities in Azure Logic Apps
See all- CVE-2026-83944Critical
Improper access control in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-70200Critical
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-69400Critical
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-56161Critical
Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network.
Original NVD description (English source)
Improper access control in Azure Logic Apps allows an authorized attacker to elevate privileges over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS