Azure HDInsight Information Disclosure Vulnerability
CVE-2026-85891 is an information disclosure vulnerability in Azure HDInsight (rated Important, CVSS 7.5).
1 version
Facts
- Microsoft id
CVE-2026-85891- Products
- Azure HDInsight
- Severity
- Important
- Impact
- Information Disclosure
- CVSS
- 7.5
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
- Exploited
- No
- Publicly disclosed
- No
- Customer action required
- Yes
- Release
- 2026-Oct
- Assigned by
- Microsoft
- Weakness
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
- MSRC revision
- 1.0
- Status pages
- Azure HDInsight status
- First captured by us
- (from our first import of this list)
- Microsoft last modified
- Source
- Security updates · open the original at Microsoft
Microsoft's revision notes
- Revision 1.0, 2026-10-13:
Information published.
Microsoft says
Exposure of sensitive information to an unauthorized actor in Azure HDInsight allows an unauthorized attacker to disclose information over a network.
What Microsoft changed
One version so far. If Microsoft edits it, each change shows here with what was removed and added.
First version we captured ·
The text as we first saw it
Seen by us · Microsoft's timestamp · Microsoft's page
Related changes
Other changes for Azure HDInsight
- Public Preview: Azure Data Explorer connector for Apache Flink · In preview
- Azure HDInsight 5.0 will be retired on 31 March 2025
- General availability: Mexico Central region added to Azure HDInsight · Launched
- Public Preview: Azure HDInsight on AKS is now available for preview in 7 new regions · In preview
- Public Preview: Azure HDInsight on AKS is now available for preview in 6 new regions · In preview
- General availability: New West US 3 region added to Azure HDInsight · Launched
- General availability: New Sweden Central region added to Azure HDInsight · Launched
- General availability: Poland Central region added to Azure HDInsight · Launched
Last updated