CVE-2026-83938
Azure Kubernetes Configuration Service Elevation of Privilege Vulnerability
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Public exploit
- None on Exploit-DB
Summary
Azure Kubernetes Configuration Service, a Microsoft cloud component used to manage Kubernetes settings, is affected by this flaw. An attacker on the network could exploit the missing authentication check to gain higher privileges than they are authorized to have.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
Missing authentication for critical function in Azure Kubernetes Configuration Service allows an unauthorized attacker to elevate privileges over a network.
Affected versions
- Microsoft Azure Kubernetes Configuration Service
-