Microsoft Patches Critical Azure AI Foundry Flaw Allowing Privilege Escalation

Microsoft has patched a critical vulnerability in Azure AI Foundry, its cloud-based AI development platform. The flaw, identified as CVE-2026-85889, has a CVSS score of 10.0, indicating maximum severity. According to Microsoft, the issue stems from missing authentication for a critical function, which could allow an unauthorized attacker to elevate privileges over a network.

The company has released security updates to address the vulnerability. In its advisory, Microsoft noted that no customer action is required, as the fixes are applied automatically. This suggests the flaw was addressed on the service side rather than requiring individual tenant updates.

While the exact technical details are limited, the vulnerability's high severity and network-based attack vector make it a significant concern for organizations using Azure AI Foundry. Privilege escalation could potentially allow attackers to gain unauthorized access to sensitive AI workloads, data, or administrative functions.

As of the publication date, there is no confirmation of active exploitation in the wild. However, given the critical nature of the flaw, organizations should verify that their Azure AI Foundry instances are up to date and monitor Microsoft's security advisories for any further developments.

Microsoft has not disclosed additional details about the vulnerability, but it is expected that more information will be shared in future security update guides. Organizations using Azure AI Foundry should review their security posture and ensure that any related access controls are properly configured.