---
id: "CVE-2026-113822"
page: "https://infrastack.ai/live/CVE-2026-113822"
kind: "vulnerability"
aliases: ["CVE-2026-113822"]
title: "Azure CycleCloud: missing authorization lets a signed-in user gain higher privileges"
severity: "medium"
cvss: 6.5
epss: null
exploited: false
status: "open"
category: "vendor"
products: []
ecosystems: []
tags: ["azure", "azure-cyclecloud", "hpc", "vendor"]
not_affected_if: ["no-authenticated-users"]
published_at: "2026-11-10T19:19:02+00:00"
first_seen_at: "2026-11-10T19:24:42+00:00"
updated_at: "2026-11-10T19:57:54+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-113822", "first_seen_at": "2026-11-10T19:24:42+00:00"}]
exploit_sources: []
---

# Azure CycleCloud: missing authorization lets a signed-in user gain higher privileges

Link for people: https://infrastack.ai/live/CVE-2026-113822 (this .md is for agents)

Azure CycleCloud lacks an authorization check, so an attacker who already has an account can raise their privileges over the network. The sources give no further detail on which action is affected.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Confirm whether your team runs Azure CycleCloud and which version is deployed in the Azure portal or on the CycleCloud server.
- Check the affected version range in the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-113822: unknown from the sources given.

## Timeline

- 2026-11-10T19:24:42+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-113822

## From the sources

Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_