High · published October 13, 2026
Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network.
| Product | Versions | Fixed in |
|---|---|---|
| microsoft/azure-keyvault-administration | < 1.0.1 | 1.0.1 |
| microsoft/azure-keyvault-administration | < 4.7.1 | 4.7.1 |
| microsoft/azure-keyvault-certificates | < 1.0.1 | 1.0.1 |
| microsoft/azure-keyvault-certificates | < 4.11.2 | 4.11.2 |
| microsoft/azure-keyvault-keys | < 4.11.2 | 4.11.2 |
| microsoft/azure-keyvault-secrets | < 1.0.1 | 1.0.1 |
| microsoft/azure-keyvault-secrets | < 4.11.2 | 4.11.2 |
| microsoft/azure-keyvault-securitydomain | all versions | — |
| microsoft/azure-keyvault-securitydomain | all versions | — |