Missing Authorization in Azure Confidential Clean Room - CVE-2026-121668
Published: November 11, 2026
Vulnerability identifier: #VU165803
CSH Severity: Low
CVSS v4: 5.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-121668
CWE-ID: CWE-862
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote user to make unauthorized modifications in an affected collaboration.
The vulnerability exists due to missing authorization in Azure Confidential Clean Rooms when handling network requests. A remote user can exploit missing authorization checks through network requests to make unauthorized modifications.
Exploitation requires ownership of an input dataset in the affected collaboration.
Affected software
Azure Confidential Clean Room
How to mitigate CVE-2026-121668
Install security update from vendor's website.
Azure Confidential Clean Room - update to 11.0.0