CVE-2026-70200 is a path traversal vulnerability (CWE-22) in Microsoft Azure Logic Apps. It allows an attacker to bypass pathname restrictions and access files or directories outside the intended scope, resulting in privilege escalation over the network. The vulnerability is remotely exploitable without user interaction and requires no privileges. Microsoft has published an official fix and manages remediation for this cloud-hosted service.

Successful exploitation can lead to complete compromise of confidentiality and integrity of affected Azure Logic Apps environments by unauthorized attackers. Availability impact is not indicated. The vulnerability allows privilege escalation remotely without authentication or user interaction.

Microsoft has released an official fix for this vulnerability and manages remediation for Azure Logic Apps as a cloud service. Users should apply the vendor's update as directed in the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70200 to mitigate this issue.