CVE-2026-88094: Azure Storage Library Elevation of Privilege Vulnerability
Azure Storage Library Elevation of Privilege Vulnerability
Other sources
Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Storage Library allows an authorized attacker to elevate privileges over a network.
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in azure-storage-blob-batch
Event History
Frequently Asked Questions
Who is exposed to this vulnerability?
Deployments that use either Microsoft azure-storage-blob-batch or the Microsoft Azure Storage Blobs client library for Java are in scope. Exploitation is possible over a network.
What level of access does an attacker need?
The attacker must already be authorized, meaning exploitation requires privileges before the elevation of privilege can occur. No user interaction is required.
What is the potential impact if exploitation succeeds?
Successful exploitation can allow privilege elevation and has high integrity and availability impact. The provided assessment does not identify a confidentiality impact.