CRITICALAi
Verified
Global

Critical RCE Chain in Microsoft Azure Kubernetes Service Exposes Cloud Workloads

·Source: Microsoft MSRC / Wiz Research

Updated:

Executive Summary

Three chained vulnerabilities in Azure AKS allow container escape and host node RCE. 40% of AKS clusters were vulnerable before patching.

Analysis

Wiz Research discovered a chain: CVE-2026-21345 (OverlayFS container escape), CVE-2026-21346 (kubelet auth bypass), CVE-2026-21347 (RBAC privilege escalation to cluster-admin). Microsoft has auto-patched managed clusters.

Timeline

Discovered
Mar 15, 2026
Published
Mar 28, 2026
Patch Available
Mar 28, 2026

Indicators of Compromise (3)

CVE (3)
CVE-2026-21345
NVDMITRE CVE
CVE-2026-21346
NVDMITRE CVE
CVE-2026-21347
NVDMITRE CVE
Source Attribution

Originally published by Microsoft MSRC / Wiz Research on Mar 28, 2026. Verified by: Microsoft, Wiz Research, CISA.

Related Threats

MEDIUMAiNEW

Shifting Budget Dynamics for Identity Security and AI Agents

AI agent projects are proliferating throughout the enterprise, and those AI agent identities require management, security, and governance. New Omdia research shows the AI agent identity budget dynamics are very different than traditional IAM projects.

Dark Reading
MEDIUMAi

Report: Mythos-Like AI Tools Raising Healthcare Cyber Stakes

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/report-mythos-like-ai-tools-raising-healthcare-cyber-stakes-image_small-6-a-31711.jpg" align=right hspace=4><b>Déjà Vu: Is Mythos in Hands of Bad Actors Akin to Cobalt Strike, Brute Ratel Abuse?</b><br>Anthropic's Claude Mythos and similarly powerful artificial intelligence tools pose elevated cyber risk to the healthcare sector,

Bank Info Security
MEDIUMAi

OpenAI Wins in Court, Jury Says Musk Waited Too Long to File

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/openai-wins-in-court-jury-says-musk-waited-too-long-to-file-image_small-9-a-31712.jpg" align=right hspace=4><b>Musk's Claims Against Altman and Microsoft Dismissed After Less Than Two Hours</b><br>A federal jury took less than two hours to dismiss Elon Musk's lawsuit against OpenAI and Sam Altman, finding his claims were filed out

Bank Info Security