CVE Catalog
CVE-2026-77897
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk0.29%
19th percentile - higher than 19% of all known CVEs
Summary
Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally.
Risk Assessment
An authorized attacker could access files outside the intended directory, potentially leading to privilege escalation and data exposure.
Recommendation
Update Power Automate to the latest version with security patches.
Other vulnerabilities in Power Automate
Original NVD description (English source)
Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS