Loading vulnerability…
Unauthenticated Privilege Escalation in Azure AI Foundry
CVE-2026-85889 is a missing-authentication vulnerability in a critical Azure AI Foundry backend function. An unauthenticated network attacker can invoke the affected function to bypass controls protecting privileged operations and elevate privileges without user interaction. The specific function and vulnerable request format have not been disclosed. The vulnerability has a CVSS v3.1 score of 10.0 with vector AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H. Microsoft deployed a service-side fix.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation can compromise confidentiality, integrity, and availability through unauthorized privileged operations in Azure AI Foundry. Potential consequences include exposure or modification of AI models and training data, disruption of service operations, and effects on connected enterprise resources or downstream systems, depending on the affected environment and integrations. The CVSS assessment indicates changed scope and high confidentiality, integrity, and availability impacts.
If you can’t patch tonight, do this now.
No vulnerability-specific temporary workaround is specified. As supplementary defensive measures, organizations can confirm service-side remediation status with Microsoft, review excessive permissions and integrations, and investigate anomalous privileged API calls, role assignments, or resource changes.
Patch, then assume compromise.
Microsoft deployed a complete fix to the Azure AI Foundry backend infrastructure. Customers do not need to install patches, change configurations, or perform other remediation actions for this vulnerability.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
35 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.