Server-Side Request Forgery in Azure AI Foundry by Microsoft
CVE-2026-108456

7.7HIGH

Key Information:

Vendor

Microsoft
Status
Azure Ai Foundry
Vendor
CVE Published:
22 October 2026

What is CVE-2026-108456?

A vulnerability in Azure AI Foundry allows an authorized attacker to exploit server-side request forgery (SSRF) mechanisms. This can enable the attacker to elevate their privileges within the network, potentially leading to unauthorized access to sensitive data and system functionalities. Proper mitigation steps and security measures are crucial to prevent exploitation.

Affected Version(s)

Azure AI Foundry -

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
7.7
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.