Overview
What is CVE-2026-69400?
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.
Vulnerability intelligence
CVE-2026-69400 and is rated Critical severity with a CVSS score of 9.6. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.