CVE-2026-85925

Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an authorized attacker to elevate privileges over a network.

An attacker with valid credentials can exploit this flaw to escalate privileges in the cloud, potentially leading to unauthorized access to keys and secrets.

Review Azure Key Vault network configuration, restrict endpoints, and implement current Microsoft security guidance.