CVE-2026-85925
HighCVSS 8.2Exploitation Probability (EPSS)
Low risk40th percentile - higher than 40% of all known CVEs
Summary
Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an authorized attacker to elevate privileges over a network.
Risk Assessment
An attacker with valid credentials can exploit this flaw to escalate privileges in the cloud, potentially leading to unauthorized access to keys and secrets.
Recommendation
Review Azure Key Vault network configuration, restrict endpoints, and implement current Microsoft security guidance.
Other vulnerabilities in Azure Key Vault
See all- CVE-2026-62825Critical
Improper authentication in Azure Key Vault allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-88132Medium
Origin validation error in Azure Key Vault allows an unauthorized attacker to disclose information over a network.
- CVE-2026-85922High
Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network.
Original NVD description (English source)
Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an authorized attacker to elevate privileges over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS