This vulnerability (CVE-2026-49163) is classified as CWE-22 (Improper Limitation of a Pathname to a Restricted Directory). It affects the Application Insights Profiler component by allowing an authorized attacker to perform path traversal attacks, potentially leading to privilege escalation over a network. The CVSS v3.1 base score is 8.8, reflecting network attack vector, low attack complexity, required privileges, no user interaction, and high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is available, and no affected versions are explicitly stated.

An authorized attacker can exploit this vulnerability to elevate privileges remotely by accessing files or directories outside the intended restricted directory. This can lead to full compromise of the affected system's confidentiality, integrity, and availability. The high CVSS score indicates a serious impact if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the Application Insights Profiler to trusted users only and monitor for suspicious activity related to path traversal attempts.