CVE-2026-85891: Azure HDInsight Information Disclosure Vulnerability

Overview

Severity
High (CVSS 7.5)
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
Category
Information Disclosure
Exploit Status
Not Exploited
Patch Tuesday
2026-Oct
Released
2026-10-13

Description

Exposure of sensitive information to an unauthorized actor in Azure HDInsight allows an unauthorized attacker to disclose information over a network.

FAQ

What type of information could be disclosed by this vulnerability? The type of information that could be disclosed if an attacker successfully exploited this vulnerability is sensitive information.

Affected Products (1)

Azure

  • Azure HDInsight

Security Updates (1)

Acknowledgments

Shiva with Microsoft, Shiva with Microsoft

Revision History

  • 2026-10-13: Information published.