Description
Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network.
Published: 2026-08-06
Score: 9.6 Critical
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability is an improper access control in Azure Logic Apps that permits an authorized attacker to read data over a network.

Affected Systems

Microsoft Azure Logic Apps is the affected product. No specific version details are supplied, so all current instances may be at risk.

Risk and Exploitability

The CVSS score of 9.6 indicates a high severity. EPSS data is not available, yet the high CVSS suggests a non‑negligible exploitation probability. The vulnerability is not listed in the CISA KEV catalog, but the attack vector is likely network‑based and requires an account with sufficient privileges. An attacker could expose confidential business data or integration details by accessing the app through its exposed endpoints.

Generated by OpenCVE AI on August 7, 2026 at 01:18 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Implement the latest Azure Logic Apps patch or update as distributed by Microsoft.
  • Review and enforce least‑privilege permissions on Logic Apps, ensuring only users that require access can read data.
  • Monitor for anomalous access patterns or data exfiltration attempts from Logic Apps endpoints.

Generated by OpenCVE AI on August 7, 2026 at 01:18 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 07 Aug 2026 01:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Fri, 07 Aug 2026 00:15:00 +0000

Type Values Removed Values Added
Description Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network.
Title Azure Logic Apps Information Disclosure Vulnerability
First Time appeared Microsoft
Microsoft azure Logic Apps
Weaknesses CWE-284
CPEs cpe:2.3:a:microsoft:azure_logic_apps:*:*:*:*:*:*:*:*
Vendors & Products Microsoft
Microsoft azure Logic Apps
References
Metrics cvssV3_1

{'score': 9.6, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C'}

Subscriptions

Microsoft Azure Logic Apps
cve-icon MITRE

Status: PUBLISHED

Assigner: microsoft

Published:

Updated: 2026-08-07T01:04:10.133Z

Reserved: 2026-06-19T13:53:31.988Z

Link: CVE-2026-56161

cve-icon Vulnrichment

Updated: 2026-08-07T01:04:07.145Z

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-07T01:30:04Z

Weaknesses