Critical Microsoft Azure AI Foundry Vulnerability Allows Attackers to Escalate Privileges
Microsoft patched CVE-2026-85889 (CVSS 10.0), a missing-auth flaw in Azure AI Foundry enabling unauthenticated network privilege escalation; no exploitation observed.
CVE-2026-85889, rated 10.0, stems from a missing authentication check (CWE-306) in Azure AI Foundry, letting unauthenticated attackers abuse a backend function and bypass access controls. Microsoft deployed a server-side fix, so no customer action is required, and reports no active exploitation or public PoC. The advisory window also included CVE-2026-85885 in Microsoft 365 Copilot and CVE-2026-85878 in Azure Database for PostgreSQL, both rated 9.9.
- Missing authentication (CWE-306) allowed unauthenticated privilege escalation over the network
- CVSS 10.0; fix applied server-side, no customer patching or configuration changes needed
- Researcher Rémy Marot disclosed the issue via coordinated vulnerability disclosure
- Related 9.9-rated flaws fixed in Microsoft 365 Copilot and Azure Database for PostgreSQL
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-85878 | Improper Authorization in Azure Database for PostgreSQL Enables Privilege Escalation | 9.9 | — | ||
| CVE-2026-85885 | Command Injection Privilege Escalation in Microsoft 365 Copilot | 8.8 | — | ||
| CVE-2026-85889 | Missing Authentication in Microsoft Azure AI Foundry Enables Privilege Escalation | 9.8 | — |
From the original article
2 min read at cybersecuritynews.com
Microsoft has patched a maximum-severity security flaw in Azure AI Foundry, its enterprise platform for building and managing generative AI applications and agents, that could have allowed an unauthenticated attacker to escalate privileges over the network without any user interaction. Tracked as CVE-2026-85889, the vulnerability carries the highest possible CVSS score of 10. 0, placing it […]
By Guru Baran · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.