Microsoft patches CVSS 10.0 Azure AI Foundry flaw enabling privilege escalation

Microsoft released patches for a maximum-severity vulnerability CVE-2026-85889 in Azure AI Foundry with a CVSS score of 10.0. Missing authentication in a critical function allowed an unauthenticated attacker to escalate privileges over the network. No customer action is required.

• Vulnerability CVE-2026-85889 received maximum CVSS 10.0
• Issue: missing authentication in critical Azure AI Foundry function
• Attacker could escalate privileges over network without authorization
• Microsoft has released fixes, no customer action required