This vulnerability (CWE-22) in Microsoft Azure Kubernetes Service involves improper limitation of a pathname to a restricted directory, enabling an authorized attacker with limited privileges to perform local code execution. The flaw arises from insufficient validation of file paths, allowing traversal outside intended directories. The issue affects version 1.0 of the service. Microsoft has published an official fix and manages remediation server-side as this is a cloud service.

Successful exploitation can lead to local code execution with high impact on confidentiality, integrity, and availability. The attacker requires some level of authorization but can execute arbitrary code locally, potentially compromising the service environment.

Microsoft has released an official fix for this vulnerability and manages remediation for Azure Kubernetes Service as a cloud-hosted service. Users should ensure their service is updated according to Microsoft's guidance available at the official advisory URL. No additional user action beyond applying the official fix is required.