This vulnerability (CVE-2026-65667) in Microsoft Teams is classified as CWE-862 (Missing Authorization). It allows an attacker without prior privileges to elevate their privileges remotely over a network. The CVSS 3.1 vector indicates the attack requires no privileges and no user interaction, with a network attack vector and complete confidentiality and integrity impact. The vendor has issued an official fix to address this issue.

Successful exploitation enables an attacker to gain elevated privileges in Microsoft Teams, potentially compromising confidentiality and integrity of data and operations within the application. Availability is not impacted. No known active exploitation has been reported.

An official fix is available from Microsoft. Users and administrators should apply the vendor-provided patch promptly to remediate this vulnerability. Since this is not a cloud service, patching must be performed on affected installations. No additional mitigation steps are indicated by the vendor advisory.