NetSight
critical10.0

CVE-2026-70200

Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a…

Impact

Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.

Affected products

VendorProductAffected versions
MicrosoftAzure Logic Apps
All versions

Weakness classification

References