{"id":"CVE-2026-121668","kind":"vulnerability","aliases":["CVE-2026-121668"],"related":[],"title":"Azure Confidential Clean Rooms: missing authorization lets an authorized user tamper","description":"Missing authorization in Azure Confidential Clean Rooms allows an authorized attacker to perform tampering over a network.","summary":"Azure Confidential Clean Rooms has a missing authorization check. An attacker who already holds a valid account can tamper with data over the network.","severity":"high","cvss":7.7,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Azure Confidential Clean Room","fixed":["11.0.0"],"affected":">= 1.0.0, < 11.0.0","ecosystem":"vendor"}],"ecosystems":[],"tags":["auth-required","azure","confidential-clean-rooms","vendor"],"not_affected_if":[],"how_to_check":"Unknown from primary source. The CVE record lists Azure Confidential Clean Room versions 1.0.0 up to but not including 11.0.0 as affected; confirm in the MSRC entry for CVE-2026-121668 whether this is a Microsoft-managed service (no customer action) or something you deploy.","fix":null,"status":"open","published_at":"2026-11-10T19:20:30+00:00","first_seen_at":"2026-11-10T19:25:09+00:00","triaged_at":"2026-11-10T19:42:45+00:00","updated_at":"2026-11-10T21:46:05+00:00","category":"vendor","confidence":0.4,"triage":{"at":"2026-11-10T19:42:45Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Azure Confidential Clean Rooms: missing authorization lets an authorized user tamper","impact":"medium","summary":"Azure Confidential Clean Rooms has a missing authorization check. An attacker who already holds a valid account can tamper with data over the network.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["azure","confidential-clean-rooms"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"Authorized attacker tampers with clean room data over the network","analyst_note":"Check the Microsoft security update guide entry for CVE-2026-121668 for affected versions, fixes and mitigation.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Teams that run Azure Confidential Clean Rooms for data collaboration. The sources do not say which configurations or roles are exposed. unknown","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000649,"input_tokens":4494,"output_tokens":400,"severity_before":"high"},"analyst_status":"done","analyst_note":"Check the Microsoft security update guide entry for CVE-2026-121668 for affected versions, fixes and mitigation.","search":"'-121668':14A,17A '-2026':13A,16A 'account':47B 'allow':62C 'alreadi':43B 'attack':41B,65C 'auth':23B 'auth-requir':22B 'author':6A,9A,38B,56C,64C 'azur':1A,25B,31B,58C 'azure':18A 'check':39B 'clean':3A,20A,28B,33B,60C 'confidenti':2A,27B,32B,59C 'confidential':19A 'confidential-clean-room':26B 'cve':12A,15A 'data':51B 'hold':44B 'let':7A 'miss':5A,37B,55C 'network':54B,71C 'perform':67C 'requir':24B 'room':4A,21A,29B,34B,61C 'tamper':11A,49B,68C 'user':10A 'valid':46B 'vendor':30B","nicknames":[],"mitigations":[],"who_affected":"Teams using Azure Confidential Clean Rooms for multi-party data collaboration. Per the CVE record, an authenticated user with low privileges can tamper with data over the network because an authorization check is missing (CWE-862, integrity impact only). The affected range comes from a CVE aggregator, not read from Microsoft's page; if the service is fully managed by Microsoft, teams may have nothing to do.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":["azureconfidentialcleanroom","confidentialcleanroom"],"ptokens":["azure","clean","confidential","room"],"labels":["authrequired","azure","confidentialcleanrooms","high","vendor"],"campaign_type":null,"search_a":"'-121668':14A,17A '-2026':13A,16A 'author':6A,9A 'azur':1A 'azure':18A 'clean':3A,20A 'confidenti':2A 'confidential':19A 'cve':12A,15A 'let':7A 'miss':5A 'room':4A,21A 'tamper':11A 'user':10A","search_b":"'account':47B 'alreadi':43B 'attack':41B 'auth':23B 'auth-requir':22B 'author':38B 'azur':25B,31B 'check':39B 'clean':28B,33B 'confidenti':27B,32B 'confidential-clean-room':26B 'data':51B 'hold':44B 'miss':37B 'network':54B 'requir':24B 'room':29B,34B 'tamper':49B 'valid':46B 'vendor':30B","search_c":"'allow':62C 'attack':65C 'author':56C,64C 'azur':58C 'clean':60C 'confidenti':59C 'miss':55C 'network':71C 'perform':67C 'room':61C 'tamper':68C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:20:30+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-121668","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-121668","severity":null,"published_at":"2026-11-10T19:20:30+00:00","modified_at":"2026-11-10T19:20:30+00:00","first_seen_at":"2026-11-10T19:25:09+00:00","fetched_at":"2026-11-10T19:25:09+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-121668:2848","url":"https://app.opencve.io/cve/CVE-2026-121668","severity":null,"published_at":"2026-11-10T21:46:05+00:00","modified_at":"2026-11-10T21:46:05+00:00","first_seen_at":"2026-11-10T21:46:05+00:00","fetched_at":"2026-11-10T21:46:05+00:00","note":"MSRC guide page is JS-only and returned nothing; only CNA data via OpenCVE (Azure Confidential Clean Room 1.0.0 to <11.0.0, CWE-862, CVSS 7.7). No fix/mitigation text read, nothing verified. Check MSRC entry in browser on revisit.","cites":["https://app.opencve.io/cve/CVE-2026-121668"]}],"documents":[{"id":119013,"url":"https://app.opencve.io/cve/CVE-2026-121668","title":"OpenCVE: CVE-2026-121668","kind":"other","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"mentions","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}