Executive brief
Windows Cloud Files Mini Filter Driver is a Microsoft system component that manages cloud-based file storage integration. An authentication bypass allows a local attacker with existing system access to tamper with cloud file operations, potentially affecting file integrity and availability for cloud-integrated workflows.
Technical details
The vulnerability is an authentication bypass in a critical function within the Windows Cloud Files Mini Filter Driver. The issue is exploitable by an authorized local attacker and does not require network access or user interaction. An attacker with local system access can bypass authentication controls to tamper with driver functionality, potentially allowing unauthorized modification of cloud file handling behavior. A patch is expected to be available through Microsoft's standard security update process.
Affected products
- Microsoft Windows Cloud Files Mini Filter Driver <UNKNOWN>
Timeline
- 2026-09-08: disclosed