Elevation of Privilege Issue in Azure AI Foundry by Microsoft
CVE-2026-85889

10CRITICAL

Key Information:

Vendor

Microsoft
Status
Azure Ai Foundry
Vendor
CVE Published:
17 September 2026

What is CVE-2026-85889?

A critical vulnerability in Azure AI Foundry arises from insufficient authentication mechanisms for vital functions, permitting unauthorized users to gain elevated privileges over the network. This flaw poses significant security risks, as it enables attackers to exploit critical functions without proper validation. Organizations using Azure AI Foundry should promptly review their systems and apply the necessary patches to safeguard against potential unauthorized access and privilege escalation.

Affected Version(s)

Azure AI Foundry -

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
10
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.