Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation

Key Points:

• Microsoft has patched a critical vulnerability in Azure AI Foundry (CVE-2026-85889) that allows unauthorized privilege escalation due to missing authentication for critical functions.
• The flaw, with a CVSS score of 10.0, affects the Azure AI Foundry platform but has not been reported as exploited in the wild. No customer action is required as the vulnerability has been fully mitigated by Microsoft.
• Security teams should ensure that their Azure AI Foundry instances are updated to the latest version to protect against this and other vulnerabilities.

Technical Details: CVE-2026-85889 allows attackers to elevate privileges over a network due to insufficient authentication mechanisms within Azure AI Foundry.

MITRE ATT&CK Techniques: None mentioned

IOCs Mentioned: None mentioned