NetSight
critical9.3

CVE-2026-70009

Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Arc allows an unauthorized attacker to elevate privileges over a networ…

Impact

Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Arc allows an unauthorized attacker to elevate privileges over a network.

Affected products

VendorProductAffected versions
MicrosoftAzure Arc
All versions

Weakness classification

References