As cited
Copy frozen at (site build).
vulnerabilities
Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation
Microsoft released patches for CVE-2026-85889, a maximum-severity flaw in Azure artificial intelligence (AI) Foundry that stems from missing authentication on a critical function. An attacker could exploit this vulnerability over the network to escalate privileges without authorization. The vendor stated that no customer action is required.
Why it matters: Organizations using Azure AI Foundry should verify that patches have been applied, as the CVSS 10.0 rating indicates an unauthenticated remote privilege escalation that could allow attackers to gain elevated access to AI resources and data.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation
Microsoft released patches for CVE-2026-85889, a maximum-severity flaw in Azure artificial intelligence (AI) Foundry that stems from missing authentication on a critical function. An unauthenticated attacker could exploit the vulnerability over a network to escalate privileges.
Why it matters: Organizations using Azure AI Foundry should apply the available patches to prevent unauthorized privilege escalation by remote attackers.
- Source published
- First seen by Cybersecurity Tracker