Elevation of Privilege Vulnerability in Azure Red Hat OpenShift by Microsoft
CVE-2026-56160

9.1CRITICAL

Key Information:

Vendor

Microsoft
Status
Azure Red Hat Openshift (aro)
Vendor
CVE Published:
23 July 2026

What is CVE-2026-56160?

An improper authorization vulnerability in Azure Red Hat OpenShift allows an attacker with authorized access to elevate their privileges over the network. This flaw could potentially enable unauthorized modifications or access to sensitive resources, posing significant security risks to affected deployments.

Affected Version(s)

Azure Red Hat OpenShift (ARO) -

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.