Zero Radar
← feed
HighVulnerabilityCVE-2026-108456updated 25 Oct 2026, 17:05 UTC

Azure AI Foundry: authorized users can gain higher privileges

A logged-in user of Azure AI Foundry can trick the service into making requests it should not make, which can give them more access than they should have. Only accounts that already have some access are at risk.

Official, 3 sources
SeverityHighCVSS 7.7 of 10
Being exploited?UnclearNo reports either way yet
Fix available?UnclearNo fixed version published in the sources yet
How sure is this?Official, 3 sourcesBacked by an official source

How the attack works simplified

  1. 1Authorized userAttacker already has a valid account
  2. 2Forged requestCrafted request makes the service call internal targets
  3. 3Service acts for attackerRequests run with the service's own trust
  4. 4Privilege gainedAccess expands beyond the user's role
  5. ResultAttacker gains elevated privileges

What happened

Server-side request forgery (SSRF) in Azure AI Foundry allows an authorized attacker to elevate privileges over a network.

Why it is dangerous: An attacker with a valid account could gain elevated privileges within Azure AI Foundry, potentially reaching resources or data beyond their role. Organizations using Azure AI Foundry with multiple users are most exposed.

Are you affected?

You are affected if you use Azure AI Foundry and have users with authorized (non-admin) access to it.

Azure AI Foundry (specific versions not stated in the available sources).

What to do

  1. Check the Microsoft MSRC entry for CVE-2026-108456 for the list of affected services and any fix or mitigation
  2. Apply the Azure AI Foundry update or mitigation Microsoft provides as soon as it is available
  3. Review who has access to Azure AI Foundry and remove accounts that are no longer needed

Timeline

  1. 22 Oct 2026, 14:00 UTC
    Publicly disclosed
  2. 22 Oct 2026, 14:00 UTC
    Reported by Microsoft MSRC · Microsoft MSRC
  3. 22 Oct 2026, 22:17 UTC
    Reported by NVD · NVD
  4. 25 Oct 2026, 17:05 UTC
    GitHub Advisory reported on it · GitHub Advisory

Sources 3 reports, oldest first

Official vendor, government CERT or advisory database

Technical details

ID
CVE-2026-108456 · GHSA-8v83-jpwp-qqr9
CVSS
7.7 / 10
EPSS
0.7% chance of exploitation within 30 days
Disclosed
22 Oct 2026, 14:00 UTC
On Zero Radar
before the radar started
Last change
25 Oct 2026, 17:05 UTC

The plain-language parts and the attack diagram were written by an AI model (anthropic/claude-haiku-5.5) from the sources above. Facts like versions, exploitation and dates come from the sources themselves. How Zero Radar works

Azure AI Foundry: authorized users can gain higher privileges · Zero Radar