high8.2
CVE-2026-85925
Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an authorized attacker to elevate privileges over a network.
Impact
Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an authorized attacker to elevate privileges over a network.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Azure-Keyvault-Secrets | from 4.11.2 before 4.11.1 |
| Microsoft | Azure-Keyvault-Administration | from 4.7.1 before 4.8.1 |
| Microsoft | Azure-Keyvault-Keys | from 4.11.2 before 4.10.1 |
| Microsoft | Azure-Keyvault-Certificates | from 4.11.2 before 4.9.1 |
| Microsoft | Azure-Keyvault-Administration | before 4.8.1 |
| Microsoft | Azure-Keyvault-Certificates | before 4.9.1 |
| Microsoft | Azure-Keyvault-Keys | before 4.10.1 |
| Microsoft | Azure-Keyvault-Secrets | before 4.11.1 |