Product:
Azure Compute Gallery
Summary
Improper neutralization of special elements used in a command allows an authorized attacker to elevate privileges locally. This vulnerability can lead to significant security risks if exploited. Attackers with the necessary permissions can execute commands that compromise the integrity and confidentiality of the system.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.7 | CVE-2026-21522 |
Exploitation
To exploit this vulnerability, an attacker must have authorized access to the Azure Compute Gallery. Once inside, they can craft specific commands that take advantage of the improper handling of special elements, allowing them to elevate their privileges and perform unauthorized actions within the system.
Affected Products
- Azure Compute Gallery: A service that allows users to manage and share images for virtual machines.
Mitigation
To mitigate this vulnerability, it is essential to apply the latest security updates provided by Microsoft. Additionally, users should review their access controls and ensure that only authorized personnel have the necessary permissions to interact with the Azure Compute Gallery.