CVE-2026-56161

Azure Logic Apps Information Disclosure Vulnerability

Published 6 Aug 2026 • Updated 7 Aug 2026

Severity: CRITICAL

Description

Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network.

Affected products (1)

• Microsoft Azure Logic Apps

Problem types

• CWE-284: Improper Access Control

References (1)

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56161