PT-2026-79208 · Microsoft · Azure Logic Apps

CVE-2026-69400

·

Published

2026-08-20

·

Updated

2026-08-24

CVSS v3.1

9.6

Critical

VectorAV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Azure Logic Apps (affected versions not specified)
Description An issue exists where improper limitation of a pathname to a restricted directory, known as path traversal, allows an unauthorized attacker to elevate privileges over a network. Path traversal is a technique that allows an attacker to access files and directories that are stored outside the web root folder by manipulating variables such as file paths.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Path traversal

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-69400

Affected Products

Azure Logic Apps