CVE-2026-85925
CVE-2026-85925 · Azure Key Vault Client SDK Elevation of Privilege Vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an authorized attacker to elevate privileges over a network.
CVSS 8.2 · High · EPSS 0.5% · Fix available
- Published
- Updated
Affected products and versions
azure-keyvault-administration
- Versions
- ≥ 4.7.1, < 4.8.1: Affected (custom)
Update to 4.8.1
azure-keyvault-certificates
- Versions
- ≥ 4.11.2, < 4.9.1: Affected (custom)
No fix published
azure-keyvault-keys
- Versions
- ≥ 4.11.2, < 4.10.1: Affected (custom)
No fix published
azure-keyvault-secrets
- Versions
- ≥ 4.11.2, < 4.11.1: Affected (custom)
No fix published