Skip to content
CVE PROGRAM SOURCE RECORD8.2 High

CVE-2026-85925

Azure Key Vault Client SDK Elevation of Privilege Vulnerability

Description

Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an authorized attacker to elevate privileges over a network.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Microsoft azure-keyvault-administration

  • 4.7.1 to < 4.8.1affected

Microsoft azure-keyvault-certificates

  • 4.11.2 to < 4.9.1affected

Microsoft azure-keyvault-keys

  • 4.11.2 to < 4.10.1affected

Microsoft azure-keyvault-secrets

  • 4.11.2 to < 4.11.1affected

References