High · published October 13, 2026
Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an authorized attacker to elevate privileges over a network.
| Product | Versions | Fixed in |
|---|---|---|
| microsoft/azure-keyvault-administration | < 4.8.1 | 4.8.1 |
| microsoft/azure-keyvault-certificates | < 4.9.1 | 4.9.1 |
| microsoft/azure-keyvault-keys | < 4.10.1 | 4.10.1 |
| microsoft/azure-keyvault-secrets | < 4.11.1 | 4.11.1 |