CVE-2026-73004

Windows Autopilot is vulnerable due to a lack of authentication for critical functions, enabling an authorized attacker to locally tamper with the system. This could lead to unauthorized modifications, potentially compromising the integrity of device provisioning and management. Organizations using Windows Autopilot should prioritize addressing this vulnerability to safeguard their deployment processes.