8.8
High
CVE-2026-32193 Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Azure Kubernetes Service…
Description
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Azure Kubernetes Service allows an authorized attacker to execute code locally.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Azure Kubernetes Service 0.20260213 | earliest → < 0.20260213.5 | 0.20260213.5 |
References
- Azure Kubernetes Service (AKS) Remote Code Execution Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Azure Kubernetes Service
The 10 CVEs of Azure Kubernetes Service →
CVE-2026-50516
Incorrect authorization in Microsoft Azure Kubernetes Service allows an authorized attacker to elevate privileges over a…
9.4
Critical
CVE-2026-56163
Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to…
10.0
Critical
CVE-2026-33105
Improper authorization in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges…
10.0
Critical
CVE-2024-29990
Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability
9.0
Critical