CVE-2026-21227 Azure Logic Apps Elevation of Privilege Vulnerability

...

CVE-2026-21227

The CVE-2026-21227 entry describes a path traversal vulnerability in Azure Logic Apps: improper limitation of a pathname to a restricted directory that could allow an unauthenticated attacker to elevate privileges over a network. The root cause is stated as a pathname restriction flaw in Azure Lo...

CVE-2026-21227

Improper limitation of a pathname to a restricted directory 'path traversal' in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network...

Azure Logic Apps Elevation of Privilege Vulnerability

Improper limitation of a pathname to a restricted directory 'path traversal' in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network...

Microsoft Azure Logic Apps path traversal vulnerability

Microsoft Azure Logic Apps is a low-code automation platform developed by the American company Microsoft. There is a path traversal vulnerability in Microsoft Azure Logic Apps, which stems from improper restrictions on path names for restricted directories. Attackers can exploit this vulnerabilit...

PT-2026-4305

Name of the Vulnerable Software and Affected Versions Azure Logic Apps affected versions not specified Description An improper limitation of a pathname to a restricted directory 'path traversal' exists in Azure Logic Apps. This allows an unauthorized attacker to elevate privileges over a network...

Microsoft Power Platform Connector Security Vulnerability

The Microsoft Power Platform Connector is a proxy or wrapper for an API from Microsoft Corporation USA. A security vulnerability exists in Microsoft Power Platform Connector. An attacker could exploit this vulnerability to conduct spoofing attacks. The following products and versions are affected...