CVE-2026-88094
Description
A flaw was found in the Azure Storage Library. This vulnerability allows an authenticated remote attacker to escalate privileges over the network. The issue occurs when the library fails to properly sanitize special characters before passing data to downstream components, enabling an attacker to inject unauthorized instructions.
Statement
This vulnerability is rated as Important because an authenticated user on the network can leverage injection against downstream services to compromise system integrity and availability without requiring initial administrative privileges. Within Red Hat environments utilizing cloud integrations with Azure storage services, exploitation requires network access and valid credentials capable of submitting crafted requests to the storage client. Successful exploitation can result in unauthorized privilege escalation within the connected cloud environment, although it does not inherently grant host-level code execution on the underlying operating system.
Understanding the Weakness (CWE)
Integrity
Technical Impact: Unexpected State
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
