CyberICT

CVE-2026-35435

Microsoft · Published May 7, 2026

CVSS v3.1

HIGH
Patch availableGet patch

Description

Azure AI Foundry Elevation of Privilege Vulnerability. Improper access control in Azure AI Foundry M365 published agents allows an unauthorized attacker to elevate privileges over a network.

Affected Products

  • Azure AI Foundry

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C