CVE-2026-69400
CriticalCVSS 9.6Exploitation Probability (EPSS)
Low risk44th percentile - higher than 44% of all known CVEs
Summary
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.
Risk Assessment
An attacker can exploit path traversal to access files outside the allowed directory, potentially leading to privilege escalation and system compromise.
Recommendation
Apply patches from Microsoft for Azure Logic Apps and restrict access to the system.
Other vulnerabilities in Azure Logic Apps
See all- CVE-2026-83944Critical
Improper access control in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-70200Critical
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-56161Critical
Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network.
- CVE-2026-42823Critical
Improper access control in Azure Logic Apps allows an authorized attacker to elevate privileges over a network.
Original NVD description (English source)
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS