CVE-2026-65818

Power Automate Elevation of Privilege Vulnerability

Published Sep 3, 2026 CVSS 3.1 · 8.5 High EPSS < 1% KEV · Not listed

Description

Server-side request forgery (ssrf) in Power Automate allows an authorized attacker to elevate privileges over a network.

Analysis

Technical impact

The vulnerability is a server‑side request forgery in Power Automate that allows an attacker who already has authorized access to the service to send requests to arbitrary internal URLs. This can be used to reach protected network resources that the user normally cannot access, effectively raising their network privileges (inferred). The flaw is identified as CWE‑918 and can lead to unauthorized data exposure or lateral movement.

Affected Systems

Microsoft Power Platform, specifically Power Automate, with no version information provided in the current advisory. Users of any configuration that uses Power Automate flows within the platform are potentially affected.

Risk and Exploitability

The advisory assigns a CVSS score of 8.5, indicating a high impact. EPSS is not available, and the vulnerability is not listed in the CISA KEV catalog. Attackers require existing authorized access to Power Automate and must target internal network resources via crafted outbound requests. The risk is high for environments where Power Automate has broad network reach and where internal endpoints lack stringent access controls.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Microsoft

Microsoft Power Platform

affected

Version	Status	Constraints
`-`	affected	—

Configuration 1 [-]

cpe:2.3:a:microsoft:power_platform:-:*:*:*:*:*:*:*

No data.

Vendor Product Versions

Microsoft

Power Platform

Version	Status	Scheme	Platform
`—`	affected	—	—

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Apply the Microsoft Power Platform security update for CVE‑2026‑65818 as published by Microsoft.
Review and minimize the permissions granted to Power Automate flows and user accounts, ensuring only the least privilege necessary is granted.
Restrict the network paths that Power Automate can call by configuring firewalls or network segmentation to block outbound requests to sensitive internal services that are not required for business processes.

Generated by OpenCVE AI on September 4, 2026 at 00:50 UTC.

Tracking

Advisories

No advisories available

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity High

Privileges Required Low

Scope Changed

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.632% probability within 30 days)

Exploitation none

Automatable no

Technical Impact total

References

Link	Providers
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65818

History

Sep 8, 2026 6:00 PM Affected versions updated View changes

Type	Values Removed	Values Added
CPEs		cpe:2.3:a:microsoft:power_platform:-:::::::*

Sep 5, 2026 5:30 AM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Sep 3, 2026 11:15 PM Description updated. Title updated. First appearance in the feed. Weaknesses updated. Affected versions updated. Affected vendors updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		Server-side request forgery (ssrf) in Power Automate allows an authorized attacker to elevate privileges over a network.
Title		Power Automate Elevation of Privilege Vulnerability
First Time appeared		Microsoft Microsoft power Platform
Weaknesses		CWE-918
CPEs		cpe:2.3:a:microsoft:power_platform::::::::
Vendors & Products		Microsoft Microsoft power Platform
References		https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65818
Metrics		cvssV3_1 `{'score': 8.5, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C'}`