PT-2025-42152 · Microsoft · Azure Container Instance

Published 2025-10-14 · Updated 2025-10-17 · CVE-2025-59292

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Azure Container Instances (ACI) (affected versions not specified)

Description An issue exists in Azure Container Instances where external control of file names or paths can allow an authorized attacker to elevate privileges locally. The vulnerability involves manipulation of file paths or names during container deployment or management.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-73

Related Identifiers

BDU:2025-12998

CVE-2025-59292

Affected Products

Azure Container Instance

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-59292 · Security Note
• https://bdu.fstec.ru/vul/2025-12998 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59292 · Vendor Advisory
• https://twitter.com/CveTodo/status/1978175803255845026 · Twitter Post
• https://t.me/cveNotify/139187 · Telegram Post
• https://roboshadow.com/blog/patch-tuesday-october-2025 · Reddit Post
• https://twitter.com/CVEnew/status/1978198225296228707 · Twitter Post