Relative Path Traversal Vulnerability in Microsoft Fabric by Microsoft
CVE-2026-63509

9.9CRITICAL

Key Information:

Vendor

Microsoft

Vendor
CVE Published:
20 August 2026

What is CVE-2026-63509?

A relative path traversal vulnerability exists in Microsoft Fabric that allows an authorized attacker to exploit the system for privilege escalation over a network. By manipulating file paths, an attacker can gain access to sensitive resources and perform unauthorized actions, posing security risks to the affected environments.

Affected Version(s)

Microsoft Fabric -

References

CVSS V3.1

Score:
9.9
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.