VYPR
← All advisories
High severity8.2NVD Advisory· Published Jan 22, 2026· Updated Jun 17, 2026

CVE-2026-21227

CVE-2026-21227

Description

Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.

Affected products

3
  • Microsoft/Azure Logic Apps3 versions
    cpe:2.3:a:microsoft:azure_logic_apps:-:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:microsoft:azure_logic_apps:-:*:*:*:*:*:*:*
    • (no CPE)
    • (no CPE)range: -

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.