Privilege Elevation Vulnerability in Azure Machine Learning by Microsoft

CVE-2025-49747

What is CVE-2025-49747?

A vulnerability in Azure Machine Learning exists due to missing authorization checks, which allows an attacker with network access to gain elevated privileges. This could lead to unauthorized manipulation of machine learning models and sensitive data, thereby compromising the security and integrity of the application. Proper access controls and security measures are essential to mitigate this risk and protect sensitive information.

References