CVE-2026-56161CRITICAL

CVE-2026-56161: Critical Access Control Flaw in Azure Logic Apps

A critical vulnerability in Azure Logic Apps allows unauthorized information disclosure, earning a CVSS score of 9.6.

9.6/10 CVSS

What This Means

CVE ID: CVE-2026-56161
Description: Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network.
CVSS 3.1 score: 9.6 (CRITICAL), vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
Published: 2026-08-07T00:16:31.827
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56161

How to Fix It

Consult the Microsoft security update guide for patching instructions
Apply all vendor-provided security updates immediately
Audit Azure Logic Apps for least privilege access
Restrict network access to trusted IP addresses
Monitor logs for unauthorized access attempts

Source

NVD

Read our full coverage of CVE-2026-56161 →

Last updated August 7, 2026 UTC