🔴 Critical: Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation
-
Microsoft has addressed a maximum-severity vulnerability in Azure AI Foundry that could allow an unauthorized attacker to escalate privileges. The flaw is tracked as CVE-2026-85889 and carries a CVSS score of 10.0, the highest possible severity rating.
According to the advisory, the issue stems from missing authentication for a critical function in Azure AI Foundry, which permits an unauthenticated attacker to elevate privileges over a network.
- No customer action is required, as Microsoft has already deployed the fix.
- The vulnerability affects Azure AI Foundry deployments reliant on the impacted critical function.
- Exploitation occurs over the network and does not require prior authentication.
Given the maximum severity score and the network-based attack vector, organizations using Azure AI Foundry should confirm their environments are receiving Microsoft's automatic updates and monitor for any related anomalous activity.
Source: The Hacker News
Does your organization rely on Azure AI Foundry, and if so, how are you verifying that the automatic fix has been applied across your environments?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login