Product:
Power Apps
Summary
Uncontrolled search path element in Microsoft Power Apps allows an unauthorized attacker to execute code over a network. This vulnerability can lead to significant security risks, including unauthorized access and data manipulation. Attackers can exploit this flaw if they can trick a user into interacting with a malicious component.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8 | CVE-2026-32172 |
Exploitation
To exploit this vulnerability, an attacker must convince a user to interact with a malicious component that takes advantage of the uncontrolled search path. This typically involves social engineering tactics to get the user to execute the malicious code, which can then run with the same privileges as the user, potentially leading to unauthorized access and control over the system.
Affected Products
- Power Apps: Vulnerable to code execution due to uncontrolled search path element.
Mitigation
To mitigate this vulnerability, users should ensure that they are using the latest version of Power Apps and apply any available security updates. Additionally, users should be cautious about executing code or components from untrusted sources and implement security best practices to limit exposure to such attacks.