CVE-2026-85891: Azure HDInsight Information Disclosure Vulnerability
Azure HDInsight Information Disclosure Vulnerability
Other sources
Exposure of sensitive information to an unauthorized actor in Azure HDInsight allows an unauthorized attacker to disclose information over a network.
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 2606012120
Event History
Frequently Asked Questions
Who can exploit this issue?
An unauthorized attacker can exploit it over a network. No privileges or user interaction are required according to the supplied severity vector.
What is the likely impact if exploitation succeeds?
Successful exploitation can disclose sensitive information. The supplied severity vector indicates high confidentiality impact, with no integrity or availability impact.
Are Azure HDInsight deployments exposed by default?
The available data does not state whether a default Azure HDInsight configuration is affected or identify any required configuration conditions.