CVE-2026-119990: Azure OpenAI Elevation of Privilege Vulnerability

Published Nov 10, 2026

Updated

Azure OpenAI Elevation of Privilege Vulnerability

Other sources

Missing authentication for critical function in Azure OpenAI allows an unauthorized attacker to elevate privileges over a network.

— Microsoft

Affected Software

1 affected component

Microsoft Azure OpenAI

Event History

Nov 10, 2026

CVE Published

via Microsoft·04:00 PM

Data Sourced

via Microsoft·04:00 PM

DescriptionSeverityWeakness

CVE Published

via MITRE·06:21 PM

Data Sourced

via MITRE·06:21 PM

DescriptionSeverity

Data Sourced

via NVD·07:20 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this vulnerability?

An unauthorized attacker can exploit it remotely over a network. The provided vector indicates that no privileges or user interaction are required.

What security impact could exploitation have?

Successful exploitation allows elevation of privilege. The provided severity vector also indicates potential high impact to confidentiality, integrity, and availability.

Is exploit complexity expected to be high?

No. The provided severity vector identifies attack complexity as low.

CVE-2026-119990: Azure OpenAI Elevation of Privilege Vulnerability

Other sources

Affected Software

Event History

Frequently Asked Questions

Who can exploit this vulnerability?

What security impact could exploitation have?

Is exploit complexity expected to be high?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this vulnerability?

What security impact could exploitation have?

Is exploit complexity expected to be high?