![\"Azure\"](\"https:\/\/www.newsbeep.com\/ca\/wp-content\/uploads\/2026\/05\/microsoft-azure.jpg\")
<\/p>\n<\/p>\n
A security researcher claims Microsoft quietly fixed an Azure Backup for AKS vulnerability after rejecting his\u00a0report, and blocking a CVE from being issued.<\/p>\n
The researcher’s report describes\u00a0a\u00a0critical privilege escalation flaw that allowed cluster-admin access from the low-privileged “Backup Contributor” role.<\/p>\n
Microsoft disputes the claim, telling BleepingComputer the behavior was expected and that “no product changes were made,” despite the researcher documenting new permission checks and failed exploit attempts after disclosure, suggestive of a silent patch.<\/p>\n
CERT agrees it’s a bug, but Microsoft blocks CVE<\/p>\n
Security researcher Justin O’Leary discovered the security flaw<\/a>\u00a0this March,\u00a0and reported it to Microsoft on March 17.<\/p>\n Microsoft Security Response Center (MSRC) rejected the report on April 13, claiming the issue only involved obtaining cluster-admin on a cluster where “the attacker already held administrator access,”\u00a0a characterization O’Leary says misrepresents the attack entirely.<\/p>\n “This is factually incorrect,” states the researcher.<\/p>\n “The vulnerability allows a user with zero Kubernetes permissions to gain cluster-admin. The attack does not require existing cluster access \u2014 it grants it.”<\/p>\n O’Leary further says that Microsoft described the submission to MITRE as “AI-generated content,” something he says did not address the technical merits of the report.<\/p>\n After the rejection, O’Leary escalated the issue to CERT Coordination Center, which independently validated the vulnerability on April 16 and, according to the researcher,\u00a0assigned it an identifier, VU#284781:<\/p>\n CERT\/CC had initially\u00a0scheduled public disclosure for June 1, 2026, but that disclosure never happened.<\/p>\n On May 4, Microsoft staff\u00a0reportedly contacted MITRE recommending against CVE assignment, again arguing the issue required pre-existing administrative access:<\/p>\n CERT\/CC later closed the case under CNA hierarchy rules<\/a>, effectively leaving Microsoft (which is a CNA) with final authority over CVE issuance for its own products.<\/p>\n How the attack worked<\/p>\n Azure Backup for AKS uses Trusted Access<\/a> to grant backup extensions cluster-admin privileges inside Kubernetes clusters.<\/p>\n According to O’Leary, the flaw allowed anyone with only the Backup Contributor role on a backup vault to trigger that Trusted Access relationship without already having Kubernetes permissions.<\/p>\n An attacker could enable backup on a target AKS cluster, causing Azure to automatically configure Trusted Access with cluster-admin privileges. From there, an attacker could extract secrets through backup operations or restore malicious workloads into the cluster.<\/p>\n O’Leary classified the issue as a Confused Deputy<\/a> vulnerability (CWE-441), where Azure RBAC and Kubernetes RBAC trust boundaries interacted in a manner\u00a0that bypassed expected authorization controls.<\/p>\n Microsoft says no changes made, behavior says otherwise<\/p>\n BleepingComputer reached out to Microsoft to understand if\u00a0the tech giant considered this finding to be\u00a0a valid security vulnerability.<\/p>\n A Microsoft spokesperson told BleepingComputer:<\/p>\n “Our assessment concluded that this is not a security vulnerability, but rather expected behavior that requires pre-existing administrative privileges within the customer\u2019s environment. Therefore, no product changes were made to address this report and no CVE or CVSS score were issued.”<\/p>\n However, following the disclosure of his report this month, O’Leary observed that the original attack path no longer works.<\/p>\n “Current behavior returns errors that did not exist in March 2026,” he states:<\/p>\n ERROR: UserErrorTrustedAccessGatewayReturnedForbidden According to O’Leary, Azure Backup for AKS now requires Trusted Access to be manually configured before backup can be enabled, reversing the earlier behavior where Azure configured it automatically.<\/p>\n He also observed additional permission checks that were absent during his original testing in March. The vault MSI now requires Reader permissions on both the AKS cluster and snapshot resource group, while the AKS cluster MSI requires Contributor permissions on the snapshot resource group.<\/p>\n In other words, the vulnerability appears to have been\u00a0fixed, but Microsoft has neither\u00a0issued a public advisory\u00a0nor notified customers.<\/p>\n The visibility problem for defenders<\/p>\n Without a CVE or advisory, defenders have little visibility into the exposure window or remediation timeline.<\/p>\n “Organizations that granted Backup Contributor between an unknown start date and May 2026 were exposed to privilege escalation,” writes the researcher.<\/p>\n “Without a CVE, security teams cannot track this exposure. Silent patching protects vendors, not customers.”<\/p>\n The case highlights a structural problem with no easy fix.<\/p>\n Disputes between security researchers and major vendors<\/a>\u00a0over severity, exploitability, and disclosure have become common in recent years, especially as vulnerability disclosure programs face increasing volumes of reports.<\/p>\n Some open-source maintainers have also publicly complained that AI-assisted reports are overwhelming<\/a> bug bounty and security triage systems, making it harder for legitimate findings to receive timely attention. Cases where big tech ignored<\/a>\u00a0patching valid\u00a0flaws despite repeated contact\u00a0by different\u00a0researchers\u00a0are not uncommon either.<\/p>\n Without a framework that realigns incentives for all parties, responsible disclosure risks becoming a bureaucratic exercise that serves no one\u2014least of all the organizations left exposed in the dark.<\/p>\n![\"CERT](\"https:\/\/www.newsbeep.com\/ca\/wp-content\/uploads\/2026\/05\/cert-vulnerability-scheduled.jpg\")
CERT\/CC assigning the flaw a tracking identifier and\u00a0disclosure date
\n\u200b\u200b\u200b\u200b\u200b\u200b\u200b(Justin O’Leary)<\/p>\n![\"Microsoft](\"https:\/\/www.newsbeep.com\/ca\/wp-content\/uploads\/2026\/05\/microsoft-blocks-cve.jpg\")
Microsoft recommending MITRE against a CVE issuance
\n(Justin O’Leary)<\/p>\n
\n“The Trusted Access role binding is missing\/has gotten removed”<\/p>\n
![\"article](\"https:\/\/www.newsbeep.com\/ca\/wp-content\/uploads\/2026\/05\/validation-gap.jpg\")
<\/a><\/p>\n