CVE-2026-26124 '.../...//' in Azure Compute Gallery allows an authorized attacker to elevate privileges locally

Description

'.../...//' in Azure Compute Gallery allows an authorized attacker to elevate privileges locally.

Affected products and versions

Product	Affected versions	Fixed in
Microsoft ACI Confidential Containers	Versions not published

Other CVEs of Microsoft ACI Confidential Containers

The 5 CVEs of Microsoft ACI Confidential Containers →

CVE-2026-26122 Initialization of a resource with an insecure default in Azure Compute Gallery allows an authorized attacker to disclose… 6.5 Medium CVE-2026-23651 Permissive regular expression in Azure Compute Gallery allows an authorized attacker to elevate privileges locally 6.7 Medium CVE-2026-21522 Improper neutralization of special elements used in a command ('command injection') in Azure Compute Gallery allows an… 6.7 Medium CVE-2026-23655 Cleartext storage of sensitive information in Azure Compute Gallery allows an authorized attacker to disclose… 6.5 Medium