Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation
Microsoft patched a CVSS 10.0 missing-authentication privilege escalation flaw, CVE-2026-85889, in Azure AI Foundry, already fully mitigated server-side.
Microsoft fixed CVE-2026-85889, a CVSS 10.0 missing-authentication flaw in Azure AI Foundry (Microsoft Foundry) that allows unauthorized attackers to elevate privileges over a network, credited to researcher Rémy Marot. No exploitation in the wild was reported, and Microsoft says these cloud flaws are fully mitigated with no customer action required. The same effort covered CVE-2026-85885 (CVSS 9.9 command injection in Microsoft 365 Copilot), CVE-2026-85878 (CVSS 9.9 Azure Database for PostgreSQL), and CVE-2026-87701 (CVSS 9.6 Azure Cosmos DB). Out-of-band Windows 11 26H1 updates (KB5129194) also address local privilege escalation flaws CVE-2026-62721 and CVE-2026-85921.
- CVE-2026-85889 (CVSS 10.0): missing authentication in Azure AI Foundry allows network privilege escalation
- No evidence of exploitation; cloud-side fixes require no customer action
- Also patched: CVE-2026-85885 (M365 Copilot, 9.9), CVE-2026-85878 (Azure PostgreSQL, 9.9), CVE-2026-87701 (Cosmos DB, 9.6)
- Out-of-band Windows 11 26H1 fixes for CVE-2026-62721 and CVE-2026-85921 local privilege escalation
- Researcher Rémy Marot credited for the Azure AI Foundry flaw
- Vendors
- Microsoft
- Organizations
- ProofpointVolexity
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-62721 | Insufficient granularity of access control in User-Mode Power Service (UMPS) allows an authorized attacker to elevate privileges locally | 7.8 | <1% | ||
| CVE-2026-85878 | Improper Authorization in Azure Database for PostgreSQL Enables Privilege Escalation | 9.9 | — | ||
| CVE-2026-85885 | Command Injection Privilege Escalation in Microsoft 365 Copilot | 8.8 | — | ||
| CVE-2026-85889 | Missing Authentication in Microsoft Azure AI Foundry Enables Privilege Escalation | 9.8 | — | ||
| CVE-2026-85921 | Double Free in Windows Secure Kernel Mode Enables Local Privilege Escalation | 8.2 | — | ||
| CVE-2026-87701 | Injection-Based Privilege Elevation in Azure Cosmos DB | 9.6 | — |
From the original article
2 min read at thehackernews.com
Microsoft has released fixes for a maximum-severity security flaw in Azure AI Foundry that could be exploited to achieve privilege escalation. No customer action is required. The vulnerability, tracked as CVE-2026-85889, carries a CVSS score of 10.
thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.