8.1
High
CVE-2026-26148 External initialization of trusted variables or data stores in Azure Entra ID allows an unauthorized attacker to elevate…
Description
External initialization of trusted variables or data stores in Azure Entra ID allows an unauthorized attacker to elevate privileges locally.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Azure AD SSH Login extension for Linux 1.0 | 1.0.0 → < 1.0.033370002 | 1.0.033370002 |