CVE-2026-83944
CriticalCVSS 10.0Summary
Improper access control in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.
Risk Assessment
An unauthenticated attacker could bypass access control mechanisms and elevate privileges, gaining access to protected resources.
Recommendation
Review and correct access control configuration in Azure Logic Apps and apply the latest platform updates.
Other vulnerabilities in Azure Logic Apps
See all- CVE-2026-70200Critical
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-69400Critical
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-56161Critical
Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network.
- CVE-2026-42823Critical
Improper access control in Azure Logic Apps allows an authorized attacker to elevate privileges over a network.
Original NVD description (English source)
Improper access control in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.