rootpwn

critical · CVSS v3 10

CVE-2026-70200

CVE-2026-70200 is a critical path traversal vulnerability in Azure Logic Apps. It can allow an unauthorized network-based attacker to gain e

Overview

CVE-2026-70200 is a critical path traversal vulnerability in Azure Logic Apps. It can allow an unauthorized network-based attacker to gain elevated privileges. It matters because Logic Apps often connect to data, APIs, and identity resources, so compromise could expand access.

Description

Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.

Impact

Confidentiality, integrity, and availability can be affected if an attacker reaches the vulnerable component and escalates privileges. Organizations using Azure Logic Apps with broad permissions, sensitive connectors, or network exposure are most at risk. Privilege escalation may enable access to connected services, data, or management functions. The impact is defensive: focus on limiting blast radius and detecting anomalous privilege changes.

Remediation

Apply Microsoft security updates for Azure Logic Apps as soon as they are available. Review and restrict Logic Apps network exposure, disable unnecessary public endpoints, and use private endpoints or VNet integration where supported. Enforce least-privilege RBAC, managed identities, and conditional access policies. Monitor Azure Activity and Logic Apps audit logs for anomalous privilege changes, connector usage, or unexpected data access.

Affected products

  • Microsoft Azure Logic Apps

Scores

Severity
critical
CVSS v2
9.4
CVSS v3
10
CVSS v4
—
EPSS
—

← All CVEs

Related CVEs

critical

CVE-2026-62874

CVE‑2026‑62874 exposes a flaw in Azure Billing where data authenticity is not properly verified. An attacker can exploit this to gain elevated privileges on the network, potentially accessing or modifying billing and subscription data. The vulnerability is critical with a CVSS v3 score of 10.0.

View analysis

critical

CVE-2026-69843

CVE‑2026‑69843 is a critical authentication bypass in Microsoft Fabric that lets an attacker spoof credentials and gain elevated privileges across the network. The flaw allows unauthorized users to impersonate legitimate accounts, potentially accessing sensitive data and services. It is a high‑risk vulnerability that requires immediate attention from defenders.

View analysis

critical

CVE-2026-85878

CVE-2026-85878 exposes an improper authorization flaw in Azure Database for PostgreSQL that lets an authenticated user gain elevated privileges across the network. The vulnerability can be exploited by users who already have access to the database, enabling them to perform actions beyond their intended scope. It is critical because it bypasses normal role boundaries and can lead to widespread compromise of data and services.

View analysis

critical

CVE-2026-93453

SOGo versions before 5.12.11 can construct password-reset links using a client-supplied Origin header as the link authority. This can cause valid recovery tokens to be delivered in links pointing to attacker-controlled domains. It matters because it can enable account takeover for users who rely on SOGo password recovery.

View analysis