8.2
High
CVE-2026-85925 Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an authorized attacker…
Description
Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an authorized attacker to elevate privileges over a network.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| azure-keyvault-administration 4.7 | 4.7.1 → < 4.8.1 | 4.8.1 |
| azure-keyvault-certificates 4.9 | earliest → < 4.9.1 | 4.9.1 |
| azure-keyvault-keys 4.10 | earliest → < 4.10.1 | 4.10.1 |
| azure-keyvault-secrets 4.11 | earliest → < 4.11.1 | 4.11.1 |