Attackers Bypass Authentication and Escalate Privileges via Critical Azure Bastion Vulnerability

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Azure Bastion Vulnerability Allows Privilege Escalation A critical vulnerability in Azure Bastion has been identified, enabling attackers to bypass authentication and escalate privileges. Organizations are advised to apply the security patch released on November 20, 2025, to mitigate this risk. 3 sources 45