CVE-2026-26124

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-26124", "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "state": "PUBLISHED", "assignerShortName": "microsoft", "dateReserved": "2026-02-11T15:52:13.911Z", "datePublished": "2026-03-05T22:18:20.984Z", "dateUpdated": "2026-06-19T18:17:55.204Z"}, "containers": {"cna": {"title": "Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability", "datePublic": "2026-03-05T16:00:00.000Z", "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:microsoft:microsoft_aci_confidential_containers:*:*:*:*:*:*:*:*", "versionStartIncluding": "-"}]}]}], "affected": [{"vendor": "Microsoft", "product": "Microsoft ACI Confidential Containers", "versions": [{"version": "-", "status": "affected"}]}], "descriptions": [{"value": "'.../...//' in Azure Compute Gallery allows an authorized attacker to elevate privileges locally.", "lang": "en-US"}], "problemTypes": [{"descriptions": [{"description": "CWE-35: Path Traversal: '.../...//'", "lang": "en-US", "type": "CWE", "cweId": "CWE-35"}]}], "providerMetadata": {"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "shortName": "microsoft", "dateUpdated": "2026-06-19T18:17:55.204Z"}, "references": [{"name": "Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability", "tags": ["vendor-advisory", "patch"], "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26124"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en-US", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "baseSeverity": "MEDIUM", "baseScore": 6.7, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"}}], "tags": ["exclusively-hosted-service"]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-03-09T20:27:52.110865Z", "id": "CVE-2026-26124", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-09T20:28:00.355Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-26124", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-03-09T20:27:52.110865Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-09T20:27:56.621Z"}}], "cna": {"tags": ["exclusively-hosted-service"], "title": "Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability", "metrics": [{"format": "CVSS", "cvssV3_1": {"version": "3.1", "baseScore": 6.7, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"}, "scenarios": [{"lang": "en-US", "value": "GENERAL"}]}], "affected": [{"vendor": "Microsoft", "product": "Microsoft ACI Confidential Containers", "versions": [{"status": "affected", "version": "-"}]}], "datePublic": "2026-03-05T16:00:00.000Z", "references": [{"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26124", "name": "Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability", "tags": ["vendor-advisory", "patch"]}], "descriptions": [{"lang": "en-US", "value": "'.../...//' in Azure Compute Gallery allows an authorized attacker to elevate privileges locally."}], "problemTypes": [{"descriptions": [{"lang": "en-US", "type": "CWE", "cweId": "CWE-35", "description": "CWE-35: Path Traversal: '.../...//'"}]}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:microsoft:microsoft_aci_confidential_containers:*:*:*:*:*:*:*:*", "vulnerable": true, "versionStartIncluding": "-"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "shortName": "microsoft", "dateUpdated": "2026-06-19T18:17:55.204Z"}}}, "cveMetadata": {"cveId": "CVE-2026-26124", "state": "PUBLISHED", "dateUpdated": "2026-06-19T18:17:55.204Z", "dateReserved": "2026-02-11T15:52:13.911Z", "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "datePublished": "2026-03-05T22:18:20.984Z", "assignerShortName": "microsoft"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "Microsoft ACI Confidential Containers", "vendor": "Microsoft", "versions": [{"status": "affected", "version": "-"}]}], "source": "secure@microsoft.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:microsoft:aci_confidential_containers:-:*:*:*:*:*:*:*", "matchCriteriaId": "E0672AA1-25ED-4836-A487-6DA0FC873C84", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [{"sourceIdentifier": "secure@microsoft.com", "tags": ["exclusively-hosted-service"]}], "descriptions": [{"lang": "en", "value": "'.../...//' in Azure Compute Gallery allows an authorized attacker to elevate privileges locally."}, {"lang": "es", "value": "Vulnerabilidad de Elevaci\u00f3n de Privilegios de Contenedores Confidenciales de ACI de Microsoft"}], "id": "CVE-2026-26124", "lastModified": "2026-06-17T10:25:46.030", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 0.8, "impactScore": 5.9, "source": "secure@microsoft.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-26124", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-03-09T20:27:52.110865Z", "version": "2.0.3"}}]}, "published": "2026-03-05T23:16:19.990", "references": [{"source": "secure@microsoft.com", "tags": ["Vendor Advisory"], "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26124"}], "sourceIdentifier": "secure@microsoft.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-35"}], "source": "secure@microsoft.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-22"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "-"}}], "enrichment": {"confidence": 93.0, "confidence_source": "matching", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 93.0, "source": "matching"}]}, "original": {"product": "Microsoft ACI Confidential Containers", "source": "cna", "vendor": "Microsoft"}, "product": "confidental_containers", "vendor": "microsoft"}], "analysis": {"en": {"generated_at": "2026-04-15T15:41:30.407547+00:00", "value": {"mitigation_remediation": ["Deploy the latest Microsoft patch for Azure ACI Confidential Containers as released by Microsoft.", "Limit Azure Compute Gallery access by assigning role\u2011based permissions only to trusted users or groups that truly need to upload or modify container images.", "Enforce strict path validation in container image manifests, rejecting any relative or absolute path references that could escape the intended file system boundary, in accordance with CWE\u201122 remediation guidelines."], "summary": {"action": "Patch Now", "impact": "Local Privilege Escalation"}, "threat_synthesis": {"affected_systems": "Microsoft Azure ACI Confidential Containers across all releases are affected. No specific version numbers or patch identifiers are provided, so any instance of ACI Confidential Containers that has not applied a Microsoft update could be impacted until a vendor fix is installed.", "description_and_impact": "The vulnerability exists in Microsoft Azure ACI Confidential Containers and is identified by path handling in the Azure Compute Gallery. An authorized attacker who can upload or manage container images can supply a string that includes forward\u2011slash sequences, allowing the attacker to execute a local privilege escalation inside the confidential container and potentially gain the rights of the container worker process; the weakness is categorized as a path traversal problem (CWE\u201122) and an unchecked relative reference (CWE\u201135), but the exact exploitation mechanism is not described explicitly and is inferred from the CWE tags and brief description.", "risk_and_exploitability": "The CVSS score of 6.7 indicates moderate severity, while the EPSS score below 1% reflects a very low likelihood of observed exploitation in the wild. The vulnerability is not listed in the CISA KEV catalog. Exploitation requires an attacker to have authorized access to the Azure Compute Gallery, limiting risk to environments where role\u2011based permissions are weak. If exploited, the attacker can elevate privileges locally within the container, potentially enabling further compromise of the host or other resources."}}}}, "created": "2026-03-06T14:56:42.344416+00:00", "updated": "2026-04-15T17:00:07.047741+00:00", "vendors": ["microsoft", "microsoft$PRODUCT$confidental_containers"]}