CVE-2026-108456: Azure AI Foundry Elevation of Privilege Vulnerability

Published Oct 22, 2026

Updated

Azure AI Foundry Elevation of Privilege Vulnerability

Other sources

Server-side request forgery (ssrf) in Azure AI Foundry allows an authorized attacker to elevate privileges over a network.

— Microsoft

Affected Software

2 affected components

Microsoft Azure AI Foundry

Event History

Oct 22, 2026

CVE Published

via Microsoft·02:00 PM

Data Sourced

via Microsoft·02:00 PM

DescriptionSeverityWeaknessAffected Software

CVE Published

via MITRE·09:44 PM

Data Sourced

via MITRE·09:44 PM

DescriptionSeverity

Frequently Asked Questions

Does exploitation require prior access?

Yes. The attacker must be authorized and have low-level privileges before exploiting the issue.

Can this be exploited remotely without user interaction?

Yes. The attack vector is network-based, has low attack complexity, and does not require user interaction.

What is the primary security impact?

Successful exploitation can allow elevation of privilege and has a high confidentiality impact. The supplied assessment does not indicate integrity or availability impact.

CVE-2026-108456: Azure AI Foundry Elevation of Privilege Vulnerability

Other sources

Affected Software

Event History

Frequently Asked Questions

Does exploitation require prior access?

Can this be exploited remotely without user interaction?

What is the primary security impact?

Company

Resources

Contact

Frequently Asked Questions

Does exploitation require prior access?

Can this be exploited remotely without user interaction?

What is the primary security impact?