{"id":"CVE-2026-105734","kind":"vulnerability","aliases":["CVE-2026-105734"],"related":[],"title":"Azure Local: permission flaw lets an authorized user gain higher privileges","description":"Incorrect permission assignment for critical resource in Azure Local allows an authorized attacker to elevate privileges locally.","summary":"Azure Local has an incorrect permission assignment on a critical resource. An attacker who already has a valid local account can raise their privileges on the machine.","severity":"high","cvss":7.0,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["azure-local","infrastructure","on-premises","windows"],"not_affected_if":["no-local-users"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:18:02+00:00","first_seen_at":"2026-11-10T19:24:21+00:00","triaged_at":"2026-11-10T19:53:53+00:00","updated_at":"2026-11-10T19:53:53+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T19:53:53Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Azure Local: permission flaw lets an authorized user gain higher privileges","impact":"high","summary":"Azure Local has an incorrect permission assignment on a critical resource. An attacker who already has a valid local account can raise their privileges on the machine.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["azure-local","windows","on-premises"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"local user gains elevated privileges on the Azure Local host","analyst_note":"Check the NVD entry and Microsoft's security update guide for affected Azure Local builds, the fixed version and any patch.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-local-users"],"who_is_affected":"Organizations running Azure Local (Microsoft's on-premises Azure infrastructure) where some users hold local accounts. The sources do not name the affected builds or the specific configuration. Systems with only trusted administrators and no local user accounts face less risk.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.00066,"input_tokens":4490,"output_tokens":422,"severity_before":"high"},"analyst_status":"queued","analyst_note":"Check the NVD entry and Microsoft's security update guide for affected Azure Local builds, the fixed version and any patch.","search":"'-105734':14A,17A '-2026':13A,16A 'account':45B 'allow':62C 'alreadi':40B 'assign':32B,55C 'attack':38B,65C 'author':7A,64C 'azur':1A,19B,26B,60C 'azure-loc':18B 'critic':35B,57C 'cve':12A,15A 'elev':67C 'flaw':4A 'gain':9A 'higher':10A 'incorrect':30B,53C 'infrastructur':21B 'let':5A 'local':2A,20B,27B,44B,61C,69C 'machin':52B 'on-premis':22B 'permiss':3A,31B,54C 'premis':24B 'privileg':11A,49B,68C 'rais':47B 'resourc':36B,58C 'user':8A 'valid':43B 'window':25B","nicknames":[],"mitigations":[],"who_affected":"Organizations running Azure Local (Microsoft's on-premises Azure infrastructure) where some users hold local accounts. The sources do not name the affected builds or the specific configuration. Systems with only trusted administrators and no local user accounts face less risk.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["azurelocal","high","infrastructure","onpremises","windows"],"campaign_type":null,"search_a":"'-105734':14A,17A '-2026':13A,16A 'author':7A 'azur':1A 'cve':12A,15A 'flaw':4A 'gain':9A 'higher':10A 'let':5A 'local':2A 'permiss':3A 'privileg':11A 'user':8A","search_b":"'account':45B 'alreadi':40B 'assign':32B 'attack':38B 'azur':19B,26B 'azure-loc':18B 'critic':35B 'incorrect':30B 'infrastructur':21B 'local':20B,27B,44B 'machin':52B 'on-premis':22B 'permiss':31B 'premis':24B 'privileg':49B 'rais':47B 'resourc':36B 'valid':43B 'window':25B","search_c":"'allow':62C 'assign':55C 'attack':65C 'author':64C 'azur':60C 'critic':57C 'elev':67C 'incorrect':53C 'local':61C,69C 'permiss':54C 'privileg':68C 'resourc':58C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:18:02+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-105734","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105734","severity":null,"published_at":"2026-11-10T19:18:02+00:00","modified_at":"2026-11-10T19:18:02+00:00","first_seen_at":"2026-11-10T19:24:21+00:00","fetched_at":"2026-11-10T19:24:21+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}