CVE-2026-32213

Received Received - Intake

Improper Authorization in Azure AI Foundry Enables Privilege Escalation

Publication date: 2026-04-03

Last updated on: 2026-04-06

Assigner: Microsoft Corporation

Description

Improper authorization in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-04-03

Last Modified

2026-04-06

Generated

2026-07-06

AI Q&A

2026-04-03

EPSS Evaluated

2026-07-05

NVD

CVE-2026-32213

EUVD

EUVD-2026-18561

Affected Vendors & Products

Vendor	Product	Version / Range
microsoft	azure_ai_foundry	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-285	The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.
CWE-863	The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

Executive Summary

This vulnerability is an improper authorization issue in Azure AI Foundry that allows an unauthorized attacker to elevate their privileges over a network.

Impact Analysis

The impact of this vulnerability is critical as it allows an attacker to gain elevated privileges without authorization, potentially leading to full control over affected systems.

Compliance Impact

The vulnerability allows an unauthorized attacker to elevate privileges over a network, which can lead to unauthorized access to sensitive data.

Such unauthorized access and potential data breaches could impact compliance with standards and regulations like GDPR and HIPAA, which require strict controls over data confidentiality, integrity, and availability.

Failure to prevent privilege escalation and unauthorized access may result in violations of these regulations, leading to legal and financial consequences.

Hi! I’m here to help you understand CVE-2026-32213. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70