Azure AI Foundry: SSRF allows authorized attacker to elevate privileges over a network (CVE-2026-108456)
Severity: medium · Patch status: patched · Since 2026-10-22 · CVE-2026-108456
Microsoft's October 2026 security guidance (published 2026-10-22) discloses CVE-2026-108456, a server-side request forgery vulnerability in Azure AI Foundry. An attacker who is already authorized to interact with the service can abuse the SSRF to elevate privileges over a network, potentially gaining access beyond their intended permissions. No exploitation in the wild or public proof-of-concept is reported. Microsoft has released a security update via the MSRC Update Guide; customers using Azure AI Foundry should apply the update and review service permissions and network access controls.
What to do
- Apply the Microsoft security update for Azure AI Foundry via the MSRC Update Guide
- Review and restrict authorized user roles and permissions on Azure AI Foundry instances
- Audit network egress/access controls around AI Foundry resources for signs of SSRF abuse
- Monitor Azure activity logs for anomalous privilege changes
Sources
All live incidents on Threat Watch
