CVE-2026-26148: Microsoft Azure Ad SSH Login Extension For Linux

High severity, CVSS 8.1. EPSS: 0.3% chance of exploitation in the next 30 days.

External initialization of trusted variables or data stores in Azure Entra ID allows an unauthorized attacker to elevate privileges locally.

Affected products

• Microsoft Azure Ad SSH Login Extension For Linux: from 1.0.0, before 1.0.033370002 (fixed in 1.0.033370002)

Published 2026-03-10. Last modified 2026-06-17.