---
id: "CVE-2026-118288"
page: "https://infrastack.ai/live/CVE-2026-118288"
kind: "vulnerability"
aliases: ["CVE-2026-118288"]
title: "Azure File Sync: permission flaw lets a local user gain higher privileges"
severity: "high"
cvss: 7.0
epss: null
exploited: false
status: "open"
category: "vendor"
products: []
ecosystems: []
tags: ["azure-file-sync", "vendor", "windows"]
not_affected_if: ["no-azure-file-sync"]
published_at: "2026-11-10T19:19:42+00:00"
first_seen_at: "2026-11-10T19:24:51+00:00"
updated_at: "2026-11-10T19:52:05+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-118288", "first_seen_at": "2026-11-10T19:24:51+00:00"}]
exploit_sources: []
---

# Azure File Sync: permission flaw lets a local user gain higher privileges

Link for people: https://infrastack.ai/live/CVE-2026-118288 (this .md is for agents)

Azure File Sync assigns permissions to a critical resource incorrectly, so an attacker who already has an authorized account can raise their privileges on the machine. The attack is local, and the sources do not describe any remote trigger.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check whether Azure File Sync server agent is installed on the Windows servers you run.

## Timeline

- 2026-11-10T19:24:51+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-118288

## From the sources

Incorrect permission assignment for critical resource in Azure File Sync allows an authorized attacker to elevate privileges locally.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_