Skip to content
OpenAdvisories
Critical MSRC-CVE-2026-21522 1 CVE

Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability

Published Feb 10, 2026 · Updated Feb 10, 2026

Vendor: Microsoft

Summary

Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

What privileges could be gained by an attacker who successfully exploited the vulnerability?
An attacker who exploited this vulnerability could execute arbitrary commands within the affected ACI container’s context, allowing them to run code with the same privileges as the compromised container. In confidential‑container scenarios, this could also let an attacker access sensitive secrets or data protected by the attested environment.

Security updates
1.2.8 — https://github.com/Azure/azure-cli-extensions/pull/9238

Vulnerabilities 1

  • Medium 6.7
    CVE-2026-21522

    Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability

    Improper neutralization of special elements used in a command ('command injection') in Azure Compute Gallery allows an authorized attacker to elevate privileges locally.

    Microsoft Microsoft ACI Confidential Containers

Revision history

  1. #1

    Information published.

References