External control of file name or path in Confidential Azure Container Instances allows an authorized attacker to elevate privileges locally.