CVE-2026-32174 Improper authentication in Azure Bot Service allows an authorized attacker to elevate privileges over a network

Description

Improper authentication in Azure Bot Service allows an authorized attacker to elevate privileges over a network.

Affected products and versions

Product	Affected versions	Fixed in
Azure AI Bot Service	Versions not published

Other CVEs of Azure AI Bot Service

The 3 CVEs of Azure AI Bot Service →

CVE-2025-30392 Improper authorization in Azure Bot Framework SDK allows an unauthorized attacker to elevate privileges over a network 9.8 Critical CVE-2025-30389 Improper authorization in Azure Bot Framework SDK allows an unauthorized attacker to elevate privileges over a network 8.7 High