Information Disclosure Vulnerability in Azure Machine Learning by Microsoft
CVE-2026-68791

8.6HIGH

Key Information:

Vendor

Microsoft
Status
Azure Machine Learning
Vendor
CVE Published:
17 September 2026

What is CVE-2026-68791?

An information disclosure vulnerability in Azure Machine Learning allows unauthorized attackers to access sensitive information over a network. This flaw arises due to incorrect authorization mechanisms, potentially exposing critical data to malicious entities. Organizations using Azure Machine Learning are advised to review their security practices and apply necessary patches to mitigate the risk of data leakage.

Affected Version(s)

Azure Machine Learning -

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
8.6
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.