PT-2026-47061 · Microsoft · Azure Kubernetes Service

Ori Lahav · CVE-2026-32193 · Published 2026-06-05 · Updated 2026-07-01

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Microsoft Azure Kubernetes Service (affected versions not specified)

Description Improper limitation of a pathname to a restricted directory, known as path traversal, allows an authorized attacker to execute code locally. This issue can be part of a chain involving prompt injection, privilege escalation, and .toml injection to achieve sandbox escaping and remote prompt execution on AI assistants, specifically utilizing an LD PRELOAD exploit.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

BDU:2026-08120

CVE-2026-32193

Affected Products

Azure Kubernetes Service

References · 6

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32193 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-08120 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-32193 · Security Note
• https://twitter.com/thedevopsdaily/status/2072213663809765555 · Twitter Post
• https://twitter.com/vbCrLf/status/2062931762955600020 · Twitter Post
• https://i.redd.it/jur840xctp9h1.png · Reddit Post