The vulnerability of the cloud platform for creating and launching automated work processes in Azure Logic Apps stems from an incorrect restriction on the path name to the restricted access catalog. This allows attackers to escalate their privileges.

The vulnerability of the cloud platform for creating and launching automated work processes in Azure Logic Apps is related to an incorrect restriction on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to increase their privileges remote...

EUVD-2026-82589

Improper access control in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network...

EUVD-2026-82592

Improper limitation of a pathname to a restricted directory 'path traversal' in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-83944

Improper access control in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-70200

Improper limitation of a pathname to a restricted directory 'path traversal' in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-70200

Azure Logic Apps is affected by a path traversal vulnerability (improper limitation of a pathname to a restricted directory) that allows an unauthorized attacker to elevate privileges over a network. The CNA-assigned CVSS 3.1 score is 10.0 (Critical) , reflecting a network-based attack with low c...

CVE-2026-83944

CVE-2026-83944 is an improper access control flaw in Azure Logic Apps that allows an unauthorized, remote attacker to elevate privileges over a network with no user interaction and no prior privileges required. The CNA-assigned CVSS 3.1 score is 10.0 (CRITICAL) with a scope change, impacting conf...

Azure Logic Apps Elevation of Privilege Vulnerability

Improper limitation of a pathname to a restricted directory 'path traversal' in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network...

Azure Logic Apps Elevation of Privilege Vulnerability

Improper access control in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network...

PT-2026-95170

Name of the Vulnerable Software and Affected Versions Azure Logic Apps affected versions not specified Description Azure Logic Apps contains a path traversal issue, which occurs when a program improperly limits a pathname to a restricted directory. This flaw allows an unauthorized attacker to...

CVE-2026-70200: Improper Limitation of a Pathname to a Restricted Directory

Improper limitation of a pathname to a restricted directory 'path traversal' in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-83944: Improper Access Control

Improper access control in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network...

PT-2026-95173

Name of the Vulnerable Software and Affected Versions Azure Logic Apps affected versions not specified Description Improper access control allows an unauthorized attacker to elevate privileges over a network. Recommendations At the moment, there is no information about a newer version that contai...

EUVD-2026-63626

Improper limitation of a pathname to a restricted directory 'path traversal' in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-69400

Improper limitation of a pathname to a restricted directory 'path traversal' in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-69400 Azure Logic Apps Elevation of Privilege Vulnerability

...

CVE-2026-69400 Azure Logic Apps Elevation of Privilege Vulnerability

...

CVE-2026-69400

Azure Logic Apps path traversal flaw allows unauthenticated network attackers to elevate privileges. CVSS 9.6 (Critical) with high confidentiality, integrity, and availability impact. Microsoft Security Response Center is tracking the issue at the linked update guide; no patch version or exploita...

Azure Logic Apps Elevation of Privilege Vulnerability

Improper limitation of a pathname to a restricted directory 'path traversal' in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-69400: Improper Limitation of a Pathname to a Restricted Directory

Improper limitation of a pathname to a restricted directory 'path traversal' in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network...