Microsoft Dynamics 365 Business Central Privilege Escalation Vulnerability

A vulnerability allowing weak authentication has been identified in Microsoft Dynamics 365 Business Central. This issue enables an authorized attacker to locally elevate privileges. The vulnerability affects several different versions and release waves of the application.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain SYSTEM privileges.

Remediation

Users can download the security update for Microsoft Dynamics 365 Business Central 2024 Release Wave 2, 2025 Release Wave 2, 2025 Release Wave 1, and 2026 Release Wave 1 through the Microsoft Support website. Knowledge Base articles 5086068, 5086070, 5086069, and 5093780 provide additional guidance.