Critical Microsoft Entra ID Vulnerability Allowed Cross-Tenant Global Admin Escalation
14 sources · Updated 4mo ago · First seen Sep 18, 2025
A severe vulnerability in Microsoft's Entra ID (formerly Azure AD) allowed attackers to use Actor Tokens from their own tenant to gain global admin privileges in any other tenant. The flaw, tracked as CVE-2025-55241, was found in the legacy Azure AD Graph API, which failed to properly validate the originating tenant. Microsoft rapidly deployed a global fix after responsible disclosure and found no evidence of exploitation.
Do you run this?See affected versions and whether adversaries are exploiting it against assets like yours.
Check your exposure
