Severity
High
Analysis Summary
CVE-2025-47966
Exposure of sensitive information to an unauthorized actor in Power Automate allows an unauthorized attacker to elevate privileges over a network.
Impact
- Privilege Escalation
Indicators of Compromise
CVE
CVE-2025-47966
Affected Vendors
- Microsoft
Affected Products
- Microsoft Power Automate for Desktop
Remediation
Use Microsoft Automatic Update to apply the appropriate patch for your system, or the Microsoft Security Update Guide to search for available patches.