Critical Vulnerability in Azure Bastion Let Attackers Bypass Authentication and Escalate privileges

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Azure Bastion Vulnerability Allows Authentication Bypass and Privilege Escalation A critical vulnerability in Azure Bastion has been identified, allowing attackers to bypass authentication and escalate privileges. Organizations are urged to apply the security patch released on November 20, 2025, to mitigate this risk across all Azure Bastion deployments. 3 sources 31