This vulnerability (CWE-22) in Microsoft Azure Kubernetes Service involves improper limitation of a pathname to a restricted directory, enabling an authorized attacker to perform local code execution. The CVSS 3.1 score of 8.8 indicates high impact on confidentiality, integrity, and availability. The vulnerability affects version 1.0 of the service. Microsoft has published an official fix and manages remediation for this cloud-hosted service. No known exploits are reported in the wild at this time.

Successful exploitation allows an authorized attacker to execute code locally within the Azure Kubernetes Service environment, potentially compromising confidentiality, integrity, and availability of the service and hosted workloads.

An official fix is available from Microsoft. Since Azure Kubernetes Service is a cloud service, Microsoft manages the remediation server-side. Users should refer to the Microsoft security advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32193 for detailed guidance and ensure their service is updated accordingly.