Product:
Confidential Azure Container Instances
Summary
External control of file name or path in Confidential Azure Container Instances allows an authorized attacker to elevate privileges locally. This vulnerability poses a significant risk as it can lead to unauthorized access and control over sensitive data and resources.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.2 | CVE-2025-59292 |
Exploitation
To exploit this vulnerability, an attacker with authorized access can manipulate file names or paths within the Azure Container Instances. By doing so, they can escalate their privileges and gain higher-level access to the system, potentially compromising the integrity and confidentiality of the data stored within the containers.
Affected Products
- Confidential Azure Container Instances: Vulnerable to privilege escalation due to external control of file names or paths.
Mitigation
To mitigate this vulnerability, it is essential to implement strict access controls and monitor file name and path manipulations within Azure Container Instances. Regular security audits and updates should also be conducted to ensure that any potential exploits are addressed promptly.