CVE-2026-62895

Permissive cross-domain policy with untrusted domains in Azure Arc allows an unauthorized attacker to elevate privileges over a network.

An unauthorized attacker could exploit loose domain policy to gain elevated privileges, potentially compromising the environment.

Configure strict cross-domain policies and apply vendor security patches.