An improper restriction of the communication channel to intended endpoints in Azure Key Vault allows an attacker who already has authorized access to elevate privileges on the network. This flaw enables the attacker to gain higher permissions on Key Vault resources or the underlying Azure infrastructure, potentially leading to unauthorized data access or manipulation. The weakness corresponds to CWE-923, representing improper restriction of communications to intended endpoints.

Microsoft Azure Key Vault Client SDKs for the Administration, Certificates, Keys, and Secrets services are affected. Version information is not specified in the CVE data; therefore, use caution when determining exact SDK releases that may be impacted.

The CVSS score of 8.2 indicates high severity. The EPSS score is not provided in the CVE data. The vulnerability is not listed in the CISA KEV catalog. Based on the description, it is inferred that the attacker already has authorized Azure credentials and can exploit the SDK’s lack of endpoint validation to raise privileges over the network, posing significant confidentiality and integrity threats.