CVE-2026-110063: Privilege Escalation in Azure VM Inspector

Uncontrolled link resolution in Azure VM Inspector enables remote privilege escalation. CVSS 10.0 critical.

CVE-2026-110063 is a link resolution vulnerability in VM Inspector for Azure Virtual Machines. The failure to validate links during file access allows unauthenticated attackers to elevate privileges over the network, compromising the entire VM infrastructure.

The vulnerability has a CVSS of 10.0 (maximum score) and is classified as critical. NVD publication dates to October 22, 2026. Within six days (October 28), a Python detector appeared on GitHub enabling applicability verification with auditable CSV/JSON inventories, signaling attack preparation.

Defenders must immediately verify whether Azure VM Inspector is installed in their environments and monitor with the available detector. Awaiting Microsoft's official patch is a priority. In the interim, isolate or segment affected systems where possible and check VM access logs for signs of exploitation.

At a glance

What: Uncontrolled link resolution in VM Inspector during file access allows unauthenticated privilege elevation over the network.
Severity: CVSS 10.0 (maximum), classified as critical. Maximum impact on confidentiality, integrity, and availability.
Affected versions: Not reported in official NVD documentation. Check all systems with Azure VM Inspector installed.
Fix: Not reported. Await official patch from Microsoft. Meanwhile apply network segmentation mitigations.
Status: NVD published October 22, 2026. Python detector on GitHub since October 28, 2026 with auditable CSV/JSON inventories.
Action: Verify Azure VM Inspector presence, monitor with detector, isolate affected systems, check VM access logs.

Sources: NVD, CVE-2026-110063

← All articles