Microsoft rejects critical Azure vulnerability report, no CVE issued

2026-05-18

There is a flaw in Azure Backup for AKS (CWE-441, CERT/CC VU#284781) in which the Backup Contributor role enables Trusted Access, granting cluster-admin privileges and allowing secret extraction and malicious workload restoration.