---
id: 7947
title: "Escalating from Logic App Contributor to Root Owner in Azure"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/cloud-pentesting/azure-logic-app-contributor-escalation-to-root-owner/"
published_at: "2022-03-09T00:00:00Z"
tags: ["cloud", "privilege-escalation", "path-traversal", "azure", "msrc", "logic-apps", "role-assignments"]
phying_url: "https://phying.com/item/7947"
lang: en
---

# Escalating from Logic App Contributor to Root Owner in Azure

## Summary

Contributor access to an Azure ARM API Connection allows creating role assignments as the connected user; path traversal escalated Logic App Contributor to tenant Root Owner, disclosed to MSRC.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2022-03-09T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/cloud-pentesting/azure-logic-app-contributor-escalation-to-root-owner/
- **Phying News:** https://phying.com/item/7947