{"id":"CVE-2026-122986","kind":"vulnerability","aliases":["CVE-2026-122986"],"related":[],"title":"Azure Kubernetes Service: improper privilege management lets an authorized user gain higher privileges","description":"Improper privilege management in Microsoft Azure Kubernetes Service allows an authorized attacker to elevate privileges locally.","summary":"Azure Kubernetes Service has an improper privilege management flaw that lets an attacker who already has authorized access elevate their privileges locally. The sources give a CVSS score of 7.8 and no further detail on the affected component or exploitation.","severity":"high","cvss":7.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["aks","azure","infrastructure","kubernetes"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:20:38+00:00","first_seen_at":"2026-11-10T19:25:11+00:00","triaged_at":"2026-11-10T19:38:53+00:00","updated_at":"2026-11-10T19:38:53+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T19:38:53Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Azure Kubernetes Service: improper privilege management lets an authorized user gain higher privileges","impact":"high","summary":"Azure Kubernetes Service has an improper privilege management flaw that lets an attacker who already has authorized access elevate their privileges locally. The sources give a CVSS score of 7.8 and no further detail on the affected component or exploitation.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["azure","kubernetes","aks"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"authorized user gains higher local privileges on the affected system","analyst_note":"Check the Microsoft Security Response Center entry for CVE-2026-122986 for affected AKS versions, the fixed build, and whether a service-side fix or a customer action is needed.","how_to_check":"- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Teams that run Azure Kubernetes Service clusters are the ones exposed, since the flaw is in the managed service. The sources do not say which AKS versions or configurations are affected, so the exposure cannot be narrowed further.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000682,"input_tokens":4496,"output_tokens":465,"severity_before":"high"},"analyst_status":"queued","analyst_note":"Check the Microsoft Security Response Center entry for CVE-2026-122986 for affected AKS versions, the fixed build, and whether a service-side fix or a customer action is needed.","search":"'-122986':16A,19A '-2026':15A,18A '7.8':53B 'access':41B 'affect':60B 'ak':20B 'allow':72C 'alreadi':38B 'attack':36B,75C 'author':9A,40B,74C 'azur':1A,21B,24B,69C 'compon':61B 'cve':14A,17A 'cvss':50B 'detail':57B 'elev':42B,77C 'exploit':63B 'flaw':32B 'gain':11A 'give':48B 'higher':12A 'improp':4A,29B,64C 'infrastructur':22B 'kubernet':2A,23B,25B,70C 'let':7A,34B 'local':45B,79C 'manag':6A,31B,66C 'microsoft':68C 'privileg':5A,13A,30B,44B,65C,78C 'score':51B 'servic':3A,26B,71C 'sourc':47B 'user':10A","nicknames":[],"mitigations":[],"who_affected":"Teams that run Azure Kubernetes Service clusters are the ones exposed, since the flaw is in the managed service. The sources do not say which AKS versions or configurations are affected, so the exposure cannot be narrowed further.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["aks","azure","high","infrastructure","kubernetes"],"campaign_type":null,"search_a":"'-122986':16A,19A '-2026':15A,18A 'author':9A 'azur':1A 'cve':14A,17A 'gain':11A 'higher':12A 'improp':4A 'kubernet':2A 'let':7A 'manag':6A 'privileg':5A,13A 'servic':3A 'user':10A","search_b":"'7.8':53B 'access':41B 'affect':60B 'ak':20B 'alreadi':38B 'attack':36B 'author':40B 'azur':21B,24B 'compon':61B 'cvss':50B 'detail':57B 'elev':42B 'exploit':63B 'flaw':32B 'give':48B 'improp':29B 'infrastructur':22B 'kubernet':23B,25B 'let':34B 'local':45B 'manag':31B 'privileg':30B,44B 'score':51B 'servic':26B 'sourc':47B","search_c":"'allow':72C 'attack':75C 'author':74C 'azur':69C 'elev':77C 'improp':64C 'kubernet':70C 'local':79C 'manag':66C 'microsoft':68C 'privileg':65C,78C 'servic':71C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:20:38+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-122986","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-122986","severity":null,"published_at":"2026-11-10T19:20:38+00:00","modified_at":"2026-11-10T19:20:38+00:00","first_seen_at":"2026-11-10T19:25:11+00:00","fetched_at":"2026-11-10T19:25:11+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}