Azure AI Foundry missing authentication allows unauthorized privilege escalation
Missing authentication for a critical function in Azure AI Foundry lets an unauthenticated attacker escalate privileges over a network. CVSS 10.0 critical; Microsoft patched on the service side with no customer action required.
- Vendor
- Microsoft
- Product
- Azure AI Foundry
- CVSS
- 10.0
- EPSS (exploit probability)
- 0.7%
- Status
- patched
- Published
Is CVE-2026-85889 being exploited?
Not on any exploited-vulnerability catalog we track. CVE-2026-85889 was not on the CISA, ENISA or CIRCL exploited catalogs as of our 2026-11-04 snapshot. That can change quickly; check the write-up below for the latest reporting.
FIRST's EPSS model puts the probability of exploitation activity in the next 30 days at 0.7% (scored October 14, 2026).
- CISA KEV[ — ]
- ENISA EUVD (exploited)[ — ]
- CIRCL KEV[ — ]
Catalog snapshot 2026-11-04. Full cross-catalog view: /kev-comparison
CVE-2026-85889 timeline
Every event links to its source. Catalog dates are each catalog's own; day offsets count from NVD publication. Data: JSON
A missing-authentication condition on a critical function in Azure AI Foundry allowed an unauthenticated attacker to escalate privileges over a network. Microsoft assigned CVSS 10.0 and patched the vulnerability on the service side; no action is required from Azure AI Foundry customers.
Refer to the MSRC advisory for the official disclosure. If your organization runs workloads on Azure AI Foundry, review activity logs for anomalous access from the period before the patch, though Microsoft has not confirmed active exploitation.
Other Microsoft CVEs we track
| CVE / Vulnerability | Severity | CVSS | EPSS | Added to KEV |
|---|---|---|---|---|
| CVE-2026-96951 Microsoft Windows Command Injection Vulnerability | [ HIGH ] | 8.8 | 9.8% | |
| CVE-2026-96940 Microsoft Exchange Server privilege escalation via weak authorizationwrite-up | [ HIGH ] | 8.8 | 2.7% | — |
| CVE-2026-65660 Microsoft SharePoint Code Injection Vulnerabilitywrite-up | [ HIGH ] | 8.8 | 8.2% | |
| CVE-2026-69843 Microsoft Fabric authentication bypass by spoofingwrite-up | [ CRITICAL ] | 10.0 | 0.9% | — |
| CVE-2026-85880 Microsoft Windows ALPC Heap Buffer Overflow Privilege Escalationwrite-up | [ HIGH ] | 7.8 | 0.4% | |
| CVE-2026-81963 Microsoft Windows Update Stack Link-Following Privilege Escalationwrite-up | [ HIGH ] | 7.8 | 0.4% | |
| CVE-2026-62916 Authentication Bypass via Alternate Path in Microsoft Entra IDwrite-up | [ CRITICAL ] | 9.1 | 0.9% | — |
| CVE-2019-1068 Microsoft SQL Server Remote Code Execution Vulnerability | [ HIGH ] | 8.8 | 57.3% |
