# CVE-2026-70200

Path traversal in Azure Logic Apps enables remote privilege escalation.

- Page: https://www.vulneraibility.com/cve/CVE-2026-70200
- CVSS: 10.0
- Known exploited: not in CISA KEV as of our last sync
- EPSS: 0.60% (percentile 48.8)
- CISA SSVC: exploitation none, automatable yes, technical impact total (assessed 2026-09-18)
- Weakness: CWE-22, CWE-285
- Published: 2026-09-17

## Affected

- Microsoft Azure Logic Apps (SaaS)

## Impact

Remote path-traversal lets attackers access restricted files and escalate privileges in Azure Logic Apps, risking config/data compromise and lateral access.

## Action

Immediate action required

## Recommendation

Apply MSRC guidance/patches immediately; restrict Logic Apps access and audit activity.

## References

- [patch] https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70200

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.