High severity7.8NVD Advisory· Published Mar 10, 2026· Updated Jun 17, 2026
CVE-2026-26141
CVE-2026-26141
Description
Improper authentication in Azure Arc allows an authorized attacker to elevate privileges locally.
Affected products
3- Microsoft/Azure Automation Hybrid Worker Windows Extensionv5Range: 1.0.0
- cpe:2.3:a:microsoft:azure_automation_hybrid_worker_windows_extension:*:*:*:*:*:*:*:*Range: >=1.0.0,<1.3.74
Patches
Vulnerability mechanics
References
1- msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26141nvdVendor Advisory
News mentions
0No linked articles in our index yet.