CVE Catalog
CVE-2026-69400
CriticalCVSS 9.6Summary
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.
Risk Assessment
An attacker can exploit path traversal to access files outside the allowed directory, potentially leading to privilege escalation and system compromise.
Recommendation
Apply patches from Microsoft for Azure Logic Apps and restrict access to the system.
Original NVD description (English source)
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.

