CVE Catalog

CVE-2026-69400

CriticalCVSS 9.6
Published: Translated: NVD NIST

Summary

Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.

Risk Assessment

An attacker can exploit path traversal to access files outside the allowed directory, potentially leading to privilege escalation and system compromise.

Recommendation

Apply patches from Microsoft for Azure Logic Apps and restrict access to the system.

Original NVD description (English source)

Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS