7.0
High
CVE-2026-77897 Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally
Description
Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Power Automate agent for virtual desktops 1.0 | 1.0.0.0 → < 2.71.115.26224 | 2.71.115.26224 |
| Power Automate for Desktop 1.0 | 1.0.0.0 → < 2.71.115.26224 | 2.71.115.26224 |
References
- Microsoft Power Automate Desktop Elevation of Privilege Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified