CVE-2026-32213
Improper Authorization in Azure AI Foundry Enables Privilege Escalation
Publication date: 2026-04-03
Last updated on: 2026-04-06
Assigner: Microsoft Corporation
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| microsoft | azure_ai_foundry | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-285 | The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action. |
| CWE-863 | The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. |
Attack-Flow Graph
AI Powered Q&A
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
The vulnerability allows an unauthorized attacker to elevate privileges over a network, which can lead to unauthorized access to sensitive data.
Such unauthorized access and potential data breaches could impact compliance with standards and regulations like GDPR and HIPAA, which require strict controls over data confidentiality, integrity, and availability.
Failure to prevent privilege escalation and unauthorized access may result in violations of these regulations, leading to legal and financial consequences.
Can you explain this vulnerability to me?
This vulnerability is an improper authorization issue in Azure AI Foundry that allows an unauthorized attacker to elevate their privileges over a network.
How can this vulnerability impact me? :
The impact of this vulnerability is critical as it allows an attacker to gain elevated privileges without authorization, potentially leading to full control over affected systems.