Azure Service Fabric Container Elevation of Privilege Vulnerability
Priority LOW 32Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Privilege escalation
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from Microsoft.
Summary
Executive Summary An Elevation of Privilege (EOP) vulnerability has been identified within Service Fabric clusters that run Docker containers. Exploitation of this EOP vulnerability requires an attacker to gain remote code execution within a container. All Service Fabric and Docker versions are impacted.
Why it matters now
EPSS 0.01172 67th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
Remediation
No fixed version listed by the sources yet.
Vendor assessments
Microsoft
Microsoft's page for this CVE →
- Impact
- Elevation of Privilege
- Exploited
- No
- Publicly disclosed
- —
- Exploitability
- Exploitation Less Likely
| Product | Status | Plan or fix |
|---|---|---|
| 1 | Affected | No update listed |
Timeline
- 2026-10-02 Threatist record created from CVE-2022-30137
- 2026-10-03 Alias added: GHSA-c3gg-844m-3p5q
References
More Microsoft Service Fabric vulnerabilities
- TI-2020-00872 An elevation of privilege vulnerability exists in Service Fabric File Store Service under… CVSS 3.1CRITICAL 9.8
Sources
- CVE-2022-30137 · CVE Program
- CVE-2022-30137 · NVD
- FIRST EPSS
- GHSA-c3gg-844m-3p5q · GitHub Advisory Database · CC BY 4.0
- CVE-2022-30137 · Microsoft Security Update Guide
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences