Azure Automation default setting exposed tenant identities (CVE‑2025‑29827)
A mis‑configured default in Azure Automation made run‑book identities public, letting an attacker with a single tenant breach the trust boundary and assume another tenant's identity. The flaw earned a 9.9 CVSS score and could grant access to scripts, credentials, and cloud resources. Microsoft has since locked the default to private.