


Perceptive Security
SOC/SIEM Consultancy

Improper authorization in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.
Published:
2 april 2026 om 22:00:00
Alert date:
3 april 2026 om 01:02:29
Source:
nvd.nist.gov
Cloud & Virtualization, Identity & Access
A vulnerability in Microsoft Azure Kubernetes Service (AKS) allows unauthorized attackers to elevate privileges over a network due to improper authorization controls. The vulnerability enables privilege escalation attacks that could compromise the security of Kubernetes clusters running on Azure. This affects Microsoft's managed Kubernetes service and could allow attackers to gain elevated access to cloud resources. The issue is related to authorization mechanisms within the AKS platform. Organizations using Azure Kubernetes Service should monitor for patches and apply security updates when available.
Technical details
Mitigation steps:
Affected products:
Microsoft Azure Kubernetes Service
Related links:
https://nvd.nist.gov/vuln/detail/CVE-2026-33105
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33105
Related CVE's:
Related threat actors:
IOC's:
This article was created with the assistance of AI technology by Perceptive.
