Azure NFS mount helper (aznfs): untrusted search path allows local privilege escalation

Impact

A local user with a low-privilege account on a host that has aznfs installed can raise their privileges. Microsoft rates the impact high for confidentiality, integrity and availability, so on a Linux compute node this likely means root. aznfs mounts Azure Blob and Azure Files NFS shares, so it can be present on Azure GPU VMs and AKS nodes that read training data or checkpoints over NFS. On a node where several users or tenant workloads share the host, root on the host exposes every workload and mounted dataset on that node. The record does not describe the search-path mechanism or which aznfs versions are affected.

Who can reach it

Local, authenticated: an existing low-privilege user on a host with aznfs installed. No user interaction is needed.

What to do

Update the aznfs package to the release named in the Microsoft advisory. The record gives no fixed version. Updating the mount-helper package should not need a reboot, but check whether existing NFS mounts or the aznfs watchdog service need restarting after the upgrade. On AKS, take the fix through the node image or blob CSI driver update that Microsoft ships.

References

Related entries

• ansible-core: malicious Galaxy role injects git flags to run code on the machine installing itCVE-2026-11332 · ansible-core (ansible-galaxy role install, git argument injection via meta/requirements.yml)High
• ansible-core: git argument injection in ansible-galaxy collection install yields command executionCVE-2026-16493 · ansible-core (ansible-galaxy collection install, git source URL handling)High
• Linux kernel nfsd: use-after-free when writing v4_end_grace races with server shutdownCVE-2026-22980 · Linux kernel nfsd (v4_end_grace write vs server shutdown)High
• Linux kernel iSCSI target: use-after-free on session teardown when complete() is called under the lockCVE-2026-23193 · Linux kernel iSCSI target (iscsit_dec_session_usage_count)High
• Linux kernel iSCSI target: use-after-free on connection close when complete() is called under the lockCVE-2026-23216 · Linux kernel iSCSI target (iscsit_dec_conn_usage_count)High
• MUNGE (munged credential daemon): This is the root of trust under Slurm. A crafted message with an oversizedCVE-2026-25506 · MUNGE (munged credential daemon)High