CVE-2026-70178 Missing authorization in Microsoft Fabric allows an authorized attacker to elevate privileges over a network

Description

Missing authorization in Microsoft Fabric allows an authorized attacker to elevate privileges over a network.

Affected products and versions

Product	Affected versions	Fixed in
Microsoft Fabric	Versions not published

Other CVEs of Microsoft Fabric

The 3 CVEs of Microsoft Fabric →

CVE-2026-69843 Authentication bypass by spoofing in Microsoft Fabric allows an unauthorized attacker to elevate privileges over a… 10.0 Critical CVE-2026-63509 Relative path traversal in Microsoft Fabric allows an authorized attacker to elevate privileges over a network 9.9 Critical