CVE-2026-122986: Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

Published Nov 10, 2026

Updated

Improper privilege management in Microsoft Azure Kubernetes Service allows an authorized attacker to elevate privileges locally.

Other sources

Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

— Microsoft

Affected Software

1 affected component

Microsoft Azure Kubernetes Service

Event History

Nov 10, 2026

CVE Published

via Microsoft·04:00 PM

Data Sourced

via Microsoft·04:00 PM

DescriptionSeverityWeakness

CVE Published

via MITRE·06:22 PM

Data Sourced

via MITRE·06:22 PM

DescriptionSeverity

Data Sourced

via NVD·07:20 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who is exposed to this vulnerability?

Microsoft Azure Kubernetes Service deployments are affected according to the available data. Exploitation requires an authorized attacker with local access, so it is most relevant where lower-privileged users or workloads can obtain local access in the environment.

What level of access does an attacker need?

The attacker must already be authorized and have local access. No user interaction is required for exploitation.

What could an attacker achieve?

A successful exploit can elevate privileges and is rated as having high impact on confidentiality, integrity, and availability.

CVE-2026-122986: Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

Other sources

Affected Software

Event History

Frequently Asked Questions

Who is exposed to this vulnerability?

What level of access does an attacker need?

What could an attacker achieve?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this vulnerability?

What level of access does an attacker need?

What could an attacker achieve?