Microsoft has released fixes for a maximum-severity security flaw in Azure AI Foundry that could be exploited to achieve privilege escalation. No customer action is required. The vulnerability, tracked as CVE-2026-85889, carries a CVSS score of 10.0. "Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network,"
Why This Matters
The evidence matters to defenders using Azure AI Foundry because it could allow an attacker to gain additional privileges.
Recommended Action
Confirm whether Microsoft is present in your environment, compare your versions against the report, and apply available vendor patches or mitigations.
CVE: CVE-2026-85889
Affected
MicrosoftAzure AI FoundryPrivilege EscalationFlaw Enabling UnauthorizedMicrosoft Patches CVSSCVE-2026-85889