CVE-2026-70200
CriticalCVSS 10.0Summary
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.
Risk Assessment
An attacker could access files outside the permitted directory and elevate privileges, potentially leading to data disclosure or modification.
Recommendation
Update Azure Logic Apps and verify path validation in workflow configurations.
Other vulnerabilities in Azure Logic Apps
See all- CVE-2026-83944Critical
Improper access control in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-69400Critical
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-56161Critical
Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network.
- CVE-2026-42823Critical
Improper access control in Azure Logic Apps allows an authorized attacker to elevate privileges over a network.
Original NVD description (English source)
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.