CVE-2026-85889
CriticalCVSS 10.0Exploitation Probability (EPSS)
Elevated risk59th percentile - higher than 59% of all known CVEs
Summary
Missing authentication for a critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.
Risk Assessment
An unauthenticated attacker could access critical functions and elevate privileges, potentially leading to unauthorized access to AI resources.
Recommendation
Enable required authentication for all critical Azure AI Foundry functions and restrict network access to the service.
Other vulnerabilities in Azure AI Foundry
See all- CVE-2026-32213Critical
Improper authorization in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-108456High
Server-side request forgery (SSRF) in Azure AI Foundry allows an authorized attacker to elevate privileges over a network.
- CVE-2026-85917High
Server-side request forgery (SSRF) in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.
Original NVD description (English source)
Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS