Elevation of Privilege in Azure Arc by Microsoft
CVE-2026-26141

7.8HIGH

Key Information:

Vendor

Microsoft
Status
Azure Automation Hybrid Worker Windows Extension
Vendor
CVE Published:
10 March 2026

What is CVE-2026-26141?

An improper authentication vulnerability in Azure Arc can be exploited by an authorized attacker to elevate privileges on affected systems. This issue specifically impacts the Hybrid Worker Extension for Arc-enabled Windows VMs, allowing unauthorized actions that could compromise system integrity. Organizations utilizing this product should remain vigilant and apply any patches or security updates provided by Microsoft to mitigate the risk associated with this vulnerability.

Affected Version(s)

Azure Automation Hybrid Worker Windows Extension 1.0.0 < 1.3.74

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.