Azure Service Fabric Runtime Elevation of Privilege Vulnerability
Priority LOW 27CWE-59Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- Required
- Attack complexity
- High
- Impact type
- Privilege escalation
- Confidentiality · integrity · availability
- None · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from Microsoft.
Summary
Improper link resolution before file access ('link following') in Service Fabric allows an authorized attacker to elevate privileges locally.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00391 33rd percentileScored 2026-11-07
Fix Fixed Service Fabric (Microsoft): 10.1 Cumulative Update 7.0
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Microsoft | Service Fabric | 1.0.0 to before 10.1 Cumulative Update 7.0 | 10.1 Cumulative Update 7.0 | Patch available | CNA |
- Service Fabric VendorMicrosoft Affected 1.0.0 to before 10.1 Cumulative Update 7.0 Fixed in 10.1 Cumulative Update 7.0 Patch available CNA
CPE configurations NVD · 7
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:microsoft:azure_service_fabric:*:*:*:*:*:*:*:* | before 10.1 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:azure_service_fabric:10.1:-:*:*:*:*:*:* | 10.1 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:azure_service_fabric:10.1:cumulative_update_2:*:*:*:*:*:* | 10.1 cumulative_update_2 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:azure_service_fabric:10.1:cumulative_update_3:*:*:*:*:*:* | 10.1 cumulative_update_3 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:azure_service_fabric:10.1:cumulative_update_4:*:*:*:*:*:* | 10.1 cumulative_update_4 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:azure_service_fabric:10.1:cumulative_update_5:*:*:*:*:*:* | 10.1 cumulative_update_5 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:azure_service_fabric:10.1:cumulative_update_6:*:*:*:*:*:* | 10.1 cumulative_update_6 | Vulnerable | Microsoft |
- cpe:2.3:a:microsoft:azure_service_fabric:*:*:*:*:*:*:*:* Versions before 10.1 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:azure_service_fabric:10.1:-:*:*:*:*:*:* Versions 10.1 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:azure_service_fabric:10.1:cumulative_update_2:*:*:*:*:*:* Versions 10.1 cumulative_update_2 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:azure_service_fabric:10.1:cumulative_update_3:*:*:*:*:*:* Versions 10.1 cumulative_update_3 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:azure_service_fabric:10.1:cumulative_update_4:*:*:*:*:*:* Versions 10.1 cumulative_update_4 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:azure_service_fabric:10.1:cumulative_update_5:*:*:*:*:*:* Versions 10.1 cumulative_update_5 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:azure_service_fabric:10.1:cumulative_update_6:*:*:*:*:*:* Versions 10.1 cumulative_update_6 Vulnerable ·Microsoft
Remediation
- Fix · CNA Service Fabric (Microsoft) Fixed in 10.1 Cumulative Update 7.0
Vendor assessments
Microsoft
Microsoft's page for this CVE →
- Impact
- Elevation of Privilege
- Exploited
- No
- Publicly disclosed
- No
- Exploitability
- Exploitation Less Likely
| Product | Status | Plan or fix |
|---|---|---|
| Azure Service Fabric | Fixed | 10.1 Cumulative Update 7.0 · Security Update |
Timeline
- 2026-10-02 Threatist record created from CVE-2025-21195
- 2026-10-03 Alias added: GHSA-6c6m-g479-h6f3
References
More Microsoft Azure Service Fabric vulnerabilities
- TI-2023-09228 Service Fabric Explorer Spoofing Vulnerability CVSS 3.1HIGH 8.2
- TI-2022-16270 Service Fabric Explorer Spoofing Vulnerability CVSS 3.1MEDIUM 6.2
- TI-2024-29122 Azure Service Fabric for Linux Remote Code Execution Vulnerability CVSS 3.1MEDIUM 6.6
- TI-2021-08645 Azure Virtual Machine Information Disclosure Vulnerability CVSS 3.1MEDIUM 6.8
- TI-2023-07930 Azure Service Fabric Container Elevation of Privilege Vulnerability CVSS 3.1HIGH 7.0
- TI-2023-18657 Azure Service Fabric on Windows Information Disclosure Vulnerability CVSS 3.1MEDIUM 6.5
Sources
- CVE-2025-21195 · CVE Program
- CVE-2025-21195 · NVD
- FIRST EPSS
- GHSA-6c6m-g479-h6f3 · GitHub Advisory Database · CC BY 4.0
- CVE-2025-21195 · Microsoft Security Update Guide
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences