CVE-2026-85925high8.2
Azure Key Vault Client SDK Elevation of Privilege Vulnerability
Impact
Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an authorized attacker to elevate privileges over a network.
Source excerpt · microsoftAffected packages
This source has no supported package-version data for matching. You can read the advisory here, but this record alone cannot power a dependency check.
Affected products
Vendor version evidence. Product records are separate from automatic dependency matching.
Microsoft · azure-keyvault-administration
| Version / range | Source status |
|---|---|
| 4.7.1 to before 4.8.1 | affected |
Microsoft · azure-keyvault-certificates
| Version / range | Source status |
|---|---|
| 4.11.2 to before 4.9.1 | affected |
Microsoft · azure-keyvault-keys
| Version / range | Source status |
|---|---|
| 4.11.2 to before 4.10.1 | affected |
Microsoft · azure-keyvault-secrets
| Version / range | Source status |
|---|---|
| 4.11.2 to before 4.11.1 | affected |
Original source description
Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an authorized attacker to elevate privileges over a network.