Unauthorized Azure Arc Token Access (CVE-2026-26117)

Danny Y@zendannyy

•updated Mar 31, 2026•4•0•302

Detects unauthorized processes attempting to access or interact with the dynamically generated Azure Arc identity token .key files. These files reside in a protected directory and are limited to SYSTEM-level ARC agent processes