Summary
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited. Customer action: Required.
Details
What action do customers need to take to address this vulnerability?
Customers must upgrade the node images for affected Azure Kubernetes Service (AKS) node pools to a node image containing the security update. Follow the instructions in Upgrade node images in Azure Kubernetes Service (AKS) to check for available updates, perform a node-image-only upgrade without changing the Kubernetes version, and verify that the updated image is running on all affected nodes.
Security updates
0 — https://github.com/Azure/AgentBaker/blob/0bdb16b0332c7f3e62a1b7c2c6e1ad0ceb6bcaea/vhdbuilder/release-notes/AKSAzureLinuxV3/gen2kata/202610.16.1.txt#L434
Vulnerabilities 1
-
High 7.8
Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability
Improper privilege management in Microsoft Azure Kubernetes Service allows an authorized attacker to elevate privileges locally.
Revision history
-
#1
Information published.
References
-
CVE-2026-122986 Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-122986
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss