EUVD-2026-82593
GHSA-4q27-2gv2-3vm4
Severity by source
AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Missing authentication on a network-reachable critical function gives PR:N/AV:N/AC:L/UI:N; cross-tenant privilege elevation justifies S:C with full C:H/I:H/A:H, matching the vendor 10.0.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
3DescriptionCVE.org
Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.
AnalysisAI
Unauthenticated remote privilege escalation in Microsoft's Azure AI Foundry cloud service: a critical function is exposed without any authentication check (CWE-306), so an attacker on the network can reach it with no credentials, no user interaction, and low attack complexity, and pivot beyond their own authorization boundary into other tenant or service resources. The vendor CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) rates 10.0, reflecting full confidentiality, integrity, and availability impact with a scope change across a multi-tenant cloud boundary. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | No special conditions - remote unauthenticated exploitation over the network against Azure AI Foundry, per AV:N/AC:L/PR:N/UI:N: no credentials, no user interaction, and low attack complexity. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The vendor CVSS3.1 vector (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H = 10.0) describes a worst-case flaw: a network-reachable critical function in Azure AI Foundry that ships with NO authentication (CWE-306), requiring no privileges, no user interaction, and yielding full confidentiality/integrity/availability impact with a scope change across a multi-tenant cloud boundary. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Remediation is server-side and Microsoft-owned: there is no customer-applied patch version, GitHub fix commit, or downloadable update documented in the available data, so treat definitive closure as dependent on the Microsoft Security Response Center service update described at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85889, and confirm the current service health/advisory state before assuming the exposure window has closed. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all Azure AI Foundry usage (workspaces, endpoints, deployments, and connected resources), confirm whether network exposure can be restricted, enable diagnostic logging and alerts for anomalous authentication and privilege events, and review Azure RBAC and managed identity assignments for least privilege. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Privilege elevation in Microsoft's Azure Billing service allows unauthenticated remote attackers to cross a trust bounda
Path traversal in pnpm's tarball extraction on Windows allows attackers to write files outside the intended package dire
Path traversal (CWE-22) in Azure Logic Apps allows an unauthenticated, network-reachable attacker to escape the intended
Improper access control in Microsoft's Azure Logic Apps cloud service allows an unauthenticated, remote attacker to elev
Default password in Himmelblau Azure Entra ID suite 3.0.0-3.0.x. CVSS 10.0.
Privilege escalation in Azure Database for PostgreSQL allows an authenticated attacker with low privileges to elevate pr
Default credentials in Cisco ISE cloud deployments on AWS/Azure/OCI. CVSS 9.9.
Deserialization of untrusted data in Azure SDK allows unauthorized code execution over a network. EPSS 0.32%.
Elevation of privilege vulnerability in Azure Front Door allows attackers to gain elevated access. Microsoft Azure cloud
Azure Front Door has an improper access control vulnerability (CVSS 9.8) allowing unauthorized attackers to elevate priv
Azure AD auth bypass in Devolutions Server 2025.3.15.0 and earlier.
Fleet device management software has a signature verification bypass that allows attackers to install malicious firmware
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today