CVE-2026-108456: high-severity vulnerability in Microsoft Azure AI Foundry
Azure AI Foundry Elevation of Privilege Vulnerability
Published
18Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.7
exploitation probability
—
observed exploitation
nono source reports it
Server-side request forgery (ssrf) in Azure AI Foundry allows an authorized attacker to elevate privileges over a network.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C
Affected products
Microsoft · Azure AI FoundryRelated CVEs — Microsoft Azure AI Foundry
In the same product, most dangerous first.
CVE-2026-35435HIGHAzure AI Foundry Elevation of Privilege VulnerabilityEPSS 1.1%CVE-2026-85917HIGHAzure AI Foundry Elevation of Privilege VulnerabilityEPSS 1.0%CVE-2026-32213CRITICALAzure AI Foundry Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2026-85889CRITICALAzure AI Foundry Elevation of Privilege VulnerabilityEPSS 0.7%