Elevation of Privilege Vulnerability in Azure OpenAI by Microsoft
CVE-2026-119990

9.8CRITICAL

Key Information:

Vendor

Microsoft
Status
Azure Open Ai
Vendor
CVE Published:
10 November 2026

What is CVE-2026-119990?

A critical flaw in Azure OpenAI exposes a vulnerability that allows unauthorized attackers to elevate their privileges over a network. This missing authentication for essential functions can lead to severe security breaches, putting sensitive data and system integrity at risk. Users and organizations utilizing Azure OpenAI are strongly advised to apply the latest security patches to mitigate this risk.

Affected Version(s)

Azure Open AI 1.0.0

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.