Description
Exposure of sensitive information to an unauthorized actor in Power Automate allows an unauthorized attacker to elevate privileges over a network.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Power Automate for Desktop | - | — |
Advisories 2
- WID-SEC-2025-1254 Microsoft Power Automate Desktop: Schwachstelle ermöglicht Privilegieneskalation BSI CERT-Bund (WID) · Jun 5, 2025
- MSRC-CVE-2025-47966 Power Automate Elevation of Privilege Vulnerability Microsoft Security Response Center · Jun 5, 2025
References
- Power Automate Elevation of Privilege Vulnerability vendor-advisory patch