CVE-2026-68791: Azure Machine Learning Information Disclosure Vulnerability
Published Sep 17, 2026
·Updated
Azure Machine Learning Information Disclosure Vulnerability
Other sources
Incorrect authorization in Azure Machine Learning allows an unauthorized attacker to disclose information over a network.
— Microsoft
Affected Software
1 affected component
Microsoft Azure Machine Learning
Event History
Sep 17, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·02:00 PM
Description
CVE Published
via MITRE·10:55 PM
Data Sourced
via MITRE·10:55 PM
DescriptionSeverity
Frequently Asked Questions
1
Does exploitation require an Azure Machine Learning account or user interaction?
No. The vector is network-based, privileges required are none, and user interaction is not required.
2
What security properties are affected if exploitation succeeds?
The available scoring indicates high confidentiality impact. Integrity and availability impact are rated none.
3
How difficult is exploitation expected to be?
The vulnerability is rated as low attack complexity and network-accessible. Exploit maturity is listed as unproven.