According to the advisory, the issue stems from missing authentication for a critical function in Azure AI Foundry, which permits an unauthenticated attacker to elevate privileges over a network.

• No customer action is required, as Microsoft has already deployed the fix.
• The vulnerability affects Azure AI Foundry deployments reliant on the impacted critical function.
• Exploitation occurs over the network and does not require prior authentication.

Given the maximum severity score and the network-based attack vector, organizations using Azure AI Foundry should confirm their environments are receiving Microsoft's automatic updates and monitor for any related anomalous activity.

Source: The Hacker News

Does your organization rely on Azure AI Foundry, and if so, how are you verifying that the automatic fix has been applied across your environments?