Sign in

10.0 Critical

CVE-2026-32213 Improper authorization in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network

Description

Improper authorization in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.

Affected products and versions

Product	Affected versions	Fixed in
Azure AI Foundry	Versions not published

The 5 CVEs of Azure AI Foundry →

CVE-2026-108456 Server-side request forgery (ssrf) in Azure AI Foundry allows an authorized attacker to elevate privileges over a… 7.7 High CVE-2026-85917 Server-side request forgery (ssrf) in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a… 7.5 High CVE-2026-85889 Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges… 10.0 Critical CVE-2026-35435 Improper access control in Azure AI Foundry M365 published agents allows an unauthorized attacker to elevate… 8.6 High

Do you use Azure AI Foundry?

Track this CVE Watch Azure AI Foundry Check my SBOMs

www.cveye.io/en/cve/CVE-2026-32213

Timeline

Published April 2, 2026
Last modified October 15, 2026

References

Azure AI Foundry Elevation of Privilege Vulnerability msrc.microsoft.com

Track this CVE