CVE-2026-85889Patch(microsoft / azure_ai_foundry)

HIGHCVSS 9.8 · CRITICAL

Exploitation observed; activity peaked at 16 mentions and remains active

Immediate actions

Patch microsoft azure_ai_foundry systems immediately
Assume compromise if assets are exposed
Hunt for exploitation attempts and persistence artifacts

Recommended action window: Immediate (within 24h)

NVD description

Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.

microsoft CVEs Back to dashboard

6.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85889

Weakness type (CWE)

CWE-306

Priority

HIGH

Exploitation

ACTIVE

PoC

NONE

Patch

AVAILABLE

Momentum

DECLINING

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

azure_ai_foundry

Threat summary

Active exploitation appears in 2 classified signals
Exploit tooling references are present in monitored signal
Patch or workaround signal is available
38 mentions across 7 observed days

What's happening

Active exploitation reported across 2 signals
Exploit tool or code specified in 1 signal
Patch or workaround mentioned in 23 signals
Technical details provided in 35 signals
Disclosure: 11 classified signals
General: 3 classified signals
Peaked 6d ago at 16 mentions (2026-09-18); latest day: 1
38 total mentions across 7 days

Affected systems

Vendors

microsoft

Products

azure_ai_foundry

1 version affected across 1 product

Deep dive

Activity timeline38 mentions / 7d

Signal classification4 categories

Patch

2257.9%

Disclosure

1128.9%

General

37.9%

Active Exploitation

25.3%

Referenced assets16 URLs

By indicator

Classification over time

Date	Total	Labels

2026-09-18	16	Active Exploitation2Disclosure5Patch9
2026-09-19	9	Disclosure1General1Patch7
2026-09-20	5	Disclosure2General1Patch2
2026-09-21	2	Patch2
2026-09-22	4	Disclosure1General1Patch2
2026-09-23	1	Disclosure1
2026-09-28	1	Disclosure1

Full discourse20 posts

Ryx@PadhiyarRushi42d
Patch
Azure AI Foundry also scored a CVSS 10.0 missing-auth flaw!! CVE-2026-85889: unauthenticated privilege escalation path. Another AI/cloud management surface with maximum severity. Confirm your tenant status and apply the vendor patch. https://0daynews.com/articles/2026-09-19-azure-ai-foundry-cve-2026-85889-cvss10-privilege-escalation/ #Cybersecurity #AI #AISecurity #MCP #Claude #GPT #Infosec #Trending #CloudSecurity #Azure
Post summary
The tweet reports CVE-2026-85889, a CVSS 10.0 unauthenticated privilege escalation in Azure AI Foundry, and urges users to apply the vendor patch, indicating a Patch classification with high confidence.
00061404
954 followersView on X
كاسبر سكاي@KasperskyDev43d
Disclosure
🔴 ثغرة في منصة الذكاء الاصطناعي من مايكروسوفت تتيح رفع الصلاحيات دون أي مصادقة. المعرّف : CVE-2026-85889 درجة الخطورة : 10.0 (CVSS) - Critical المتأثر : Azure AI Foundry الحل : أُصلحت من جانب الخدمة الرابط : https://thehackernews.com/2026/09/microsoft-patches-cvss-100-azure-ai.html #Azure #CVE202685889
Post summary
The text announces CVE-2026-85889, a critical (CVSS 10.0) privilege escalation vulnerability in Azure AI Foundry that allows unauthenticated access, while noting it has been fixed on the service side. It provides technical details but lacks a named exploit, PoC, or specific patch/advisory.
11010249
39.9K followersView on X
Rıdvan Yağlı@ridvanyagli45d
Disclosure
Microsoft / Azure tarafında bugün yayınlanan kritik güvenlik açıkları: — CVE-2026-69843: Microsoft Fabric CVSS: 10.0 Etkisi: Kimlik doğrulama atlatma (spoofing). Yetkisiz bir saldırganın ağ üzerinden kimlik doğrulamayı aşarak yetki yükseltmesine izin veriyor. — CVE-2026-62874: Azure Billing CVSS: 10.0 Etkisi: Veri doğrulama yetersizliği. Saldırgan tarafından sağlanan verinin yeterince doğrulanmaması, ağ üzerinden yetki yükseltmeye yol açabiliyor. — CVE-2026-85889: Azure AI Foundry CVSS: 10.0 Etkisi: Kritik bir fonksiyonda kimlik doğrulama eksikliği. Yetkisiz saldırgan ağ üzerinden kritik işlevi çağırarak yetki yükseltebiliyor. — CVE-2026-69865: Microsoft/Azure Container Registry CVSS: 10.0 Etkisi: Kullanıcı kontrollü anahtar üzerinden yetkilendirme atlatma. Yetkisiz saldırganın ağ üzerinden yetki yükseltmesine izin veriyor. — CVE-2026-69399: Azure Arc CVSS CVSS: 10.0 Etkisi: Confused Deputy / istem dışı proxy problemi. Azure Arc'ın başka bir güvenlik bağlamında gerçekleştirdiği işlemler kötüye kullanılarak yetki yükseltme mümkün. — CVE-2026-85878: Azure Database for PostgreSQL CVSS: 9.9 Etkisi: Hatalı yetkilendirme. Düşük seviyede yetkisi olan bir saldırgan ağ üzerinden daha yüksek yetkiler elde edebiliyor. — CVE-2026-87701: Azure Cosmos DB CVSS: 9.6 Etkisi: Injection açığı. Çıktıdaki özel karakterlerin yeterince filtrelenmemesi, yetkili bir saldırganın ağ üzerinden yetki yükseltmesine yol açabiliyor. — CVE-2026-85885: Microsoft 365 Copilot CVSS: 9.9 Etkisi: Command injection. Yetkili bir saldırganın özel hazırlanmış girdilerle komut enjeksiyonu gerçekleştirerek yetki yükseltmesine neden olabiliyor.
Post summary
The post announces 8 critical Microsoft/Azure CVEs with CVSS scores and technical impact details but contains no PoC, exploit tool, active-exploitation claim, or patch/workaround information.
00030288
2.5K followersView on X
セキュリティ対策Lab@securityLab_jp43d
Patch
Microsoft、Azure・Copilotなど18件の脆弱性を修正　7件がCVSS 10.0、顧客側の更新作業は不要(CVE-2026-85889)他 https://rocket-boys.co.jp/security-measures-lab/microsoft-cve-2026-85889-update-report/ #セキュリティ対策Lab #security #securitynews #セキュリティ #セキュリティニュース
Post summary
The tweet reports that Microsoft fixed 18 vulnerabilities, including issues affecting Azure and Copilot, with 7 rated CVSS 10.0 and no customer-side update work required. The core message focuses on the availability of fixes rather than PoC, exploit tooling, or active exploitation.
00020200
689 followersView on X
Ned Peterson@NedPeterson9944d
Patch
A CVSS 10.0 in the cloud got fixed before you knew it existed. That's the good news and the problem. Microsoft patched CVE-2026-85889, a missing-authentication flaw in Azure AI Foundry that let an unauthenticated attacker elevate privileges over the network, as part of 18 fixes across Azure and Copilot products this week, including 9.9s in Microsoft 365 Copilot and Azure Database for PostgreSQL and a 9.6 in Cosmos DB. No exploitation observed, and every fix was server-side, so customers had nothing to do. The lesson for CISOs: the AI platform layer is now part of your cloud attack surface, and you don't control the patch cycle for it. Push your providers for disclosure timelines and exposure data, and log which of these services hold your crown-jewel data. Trust-but-verify is a posture, not a slogan. https://thehackernews.com/2026/09/microsoft-patches-cvss-100-azure-ai.html #CloudSecurity #Azure #CyberSecurity
Post summary
Microsoft has patched CVE-2026-85889, a missing-authentication vulnerability in Azure AI Foundry with a CVSS score of 10.0, and no exploitation has been observed.
1001088
813 followersView on X
Ned Peterson@NedPeterson9945d
Patch
A CVSS 10.0 in the cloud platform where you build your AI agents. Read that twice. Microsoft just patched CVE-2026-85889 in Azure AI Foundry: missing authentication on a critical function, letting an unauthenticated attacker escalate privileges over the network. No evidence of exploitation, and Microsoft mitigated it server-side, so there's nothing for customers to patch. Critical fixes for Microsoft 365 Copilot, Azure Database for PostgreSQL, and Cosmos DB landed in the same window. The lesson for CISOs: "no customer action required" is not "no customer exposure." Your AI development stack now sits squarely inside the shared responsibility model, and you found out about a max-severity bug in it from a disclosure, not from your own telemetry. Inventory which AI platform services you depend on, know which identities and data they can reach, and make sure your cloud posture and NHI programs cover them like any other production workload. https://thehackernews.com/2026/09/microsoft-patches-cvss-100-azure-ai.html #CloudSecurity #CNAPP #CyberSecurity
Post summary
Microsoft disclosed and patched CVE-2026-85889, a critical unauthenticated privilege escalation flaw in Azure AI Foundry, mitigated server-side with no customer action required. Though no PoC or active exploitation was reported, the severity and technical details underscore the risks to AI development platforms.
1001074
812 followersView on X
iototsecnews@iototsecnews36d
Disclosure
Azure AI Foundry の脆弱性 CVE-2026-85889 などが FIX：ネットワーク経由での権限昇格の恐れ https://iototsecnews.jp/2026/09/18/critical-microsoft-azure-ai-foundry-vulnerability-allows-attackers-to-escalate-privileges/ Azure AI Foundry の脆弱性 CVE-2026-85889 (CVSS: 10.0) を扱った記事です。本来はアクセスを制限する認証の仕組みが機能していなかったことが背景にあります。この問題により、外部から不正に権限を奪われ、データや連動する基幹システムへ及ぶ被害の発生／大切な情報の漏洩などのリスクが存在していました。幸いにもサービス提供元によるクラウド側での自動対処が実施済みであるため、利用者側で作業を行う必要はありません。クラウド環境であっても通知や情報の定期的確認／セキュリティ更新の把握／迅速な状況把握が安全な運用のために求められます。 #AIFoundry #Azure #CVE202685889 #Microsoft #Vulnerability
Post summary
The text discloses a critical Azure AI Foundry vulnerability (CVE‑2026‑85889, CVSS 10.0) involving missing authentication that could lead to remote privilege escalation and data loss. The vendor has applied an automatic cloud‑side fix, eliminating the need for user action, but ongoing monitoring and security updates remain essential.
00010129
517 followersView on X
CCB Alert@CCBalert41d
Disclosure
Warning: Security Updates for a critical vulnerability affecting #Microsoft Azure AI Foundry. CVE-2026-85889 CVSS:10. Successful exploitation allows a remote attacker to gain elevated privileges without authentication, resulting in full compromise of the affected systems. #Patch
Post summary
The text discloses a critical CVE (CVSS 10) in Microsoft Azure AI Foundry allowing unauthenticated privilege escalation and full compromise, with a generic call to apply security updates but no named patch or exploit details.
01000371
7.3K followersView on X
Conrad Lotz@conradlotz43d
Patch
INTERESTING Microsoft patched CVSS 10.0 in Azure AI Foundry Microsoft fixed a missing-authentication privilege escalation (CVE-2026-85889) in Azure AI Foundry. CVSS 10.0, no customer action required because it’s fully mitigated server-side.
Post summary
The post announces that Microsoft fixed a missing-authentication privilege escalation issue in Azure AI Foundry with a CVSS 10.0 score and emphasizes that it is mitigated server-side. The primary focus is on the patch/mitigation rather than exploitation or PoC details.
1000082
1.9K followersView on X
Xcademia@xcademialtd44d
Patch
🚨 CVSS 10.0: Microsoft patches a critical Azure AI flaw. ⚠️ Microsoft has fixed CVE-2026-85889, a critical vulnerability in Azure AI Foundry that could allow an unauthenticated attacker to escalate privileges over a network. 🔴 CVSS 10.0 🔓 No authentication required ⬆️ Privilege escalation ☁️ Azure AI Foundry affected Microsoft says the vulnerability has been fully mitigated server-side, so customers do not need to take action. There is also no evidence of exploitation in the wild. 🔎 See what happened 👇 https://www.xcademia.com/news/microsoft-discloses-critical-cvss-10-azure-ai-foundry-privilege-escalation-flaw #CyberSecurity #Microsoft #Azure #AzureAI #CVE #CloudSecurity #InfoSec #AI #TechNews #Xcademia
Post summary
The post announces that Microsoft has fixed a critical CVSS 10.0 privilege escalation vulnerability in Azure AI Foundry and that the issue has been mitigated server-side. It also notes that no exploitation in the wild is known.
0001036
21 followersView on X
Vix@VixWizzer44d
General
Wild https://nvd.nist.gov/vuln/detail/cve-2026-85889
Post summary
The tweet briefly references CVE-2026-85889 with only a link to its NVD entry and no additional information about proof of concept, exploits, active exploitation, or remediation.
10000120
667 followersView on X
Diario฿itcoin@DiarioBitcoin45d
Patch
🚨 Microsoft corrige falla CVSS 10.0 en Azure AI Foundry CVE-2026-85889 permitía elevar privilegios sin autenticación. El parche fue aplicado del lado del servidor. ⚠️ Windows 11 26H1 requiere instalar KB5129194 para corregir dos fallas adicionales. https://t.co/4OZ9Ec9wEr
Post summary
The text announces that Microsoft patched CVE-2026-85889 (CVSS 10.0, privilege escalation without authentication) in Azure AI Foundry server-side, and directs Windows 11 26H1 users to install KB5129194 for two additional fixes.
10000619
213.4K followersView on X
CyberNexora News@CyberNexoraNews45d
Patch
Azure AI Foundry Hit by CVSS 10.0 Flaw Critical Microsoft vulnerability enables potential privilege escalation. CVE-2026-85889 has been patched. #CyberNexoraNews #CyberSecurity #Microsoft #Azure #AIFoundry #CloudSecurity #CVE2026 #InfoSec https://t.co/Q2G5ORQMTs
Post summary
The text announces a critical CVSS 10.0 privilege escalation vulnerability in Azure AI Foundry (CVE-2026-85889) and explicitly states that it has been patched.
0001049
29 followersView on X
CVE@CVEnew46d
Disclosure
CVE-2026-85889 Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network. https://www.cve.org/CVERecord?id=CVE-2026-85889
Post summary
The text announces CVE-2026-85889 with basic technical details—a missing authentication flaw in Azure AI Foundry enabling unauthorized privilege escalation—but provides no PoC, exploit, patch, or active exploitation evidence, classifying it as a vulnerability disclosure.
01000848
58.1K followersView on X
KAPUALabs LLC@kapualabs41d
Disclosure
We must apply Kerckhoffs's lens to #MSFT: CVE-2026-85889 allows unauthenticated privilege escalation in Azure AI Foundry, CVSS 10.0. https://post.kapualabs.com/2p8actbt https://t.co/7ZxIbIjBiI
Post summary
The tweet discloses CVE-2026-85889, an unauthenticated privilege escalation vulnerability in Azure AI Foundry with a CVSS score of 10.0, and includes links to further information.
0000036
82 followersView on X
BT Haberler@BTHaberler41d
Patch
Microsoft, Azure AI Foundry'de Maksimum Ciddiyette (CVSS 10.0) Bir Yetki Yükseltme Açığını Kapattı! Güvenlik araştırmacısı Rémy Marot'un keşfettiği CVE-2026-85889 (CVSS 10.0), Azure AI Foundry'de kritik bir işlevin kimlik doğrulamasını tamamen atlayarak, yetkisiz bir saldırganın ağ üzerinden yetki yükseltmesine izin veriyordu. • Microsoft, açığın vahşi doğada istismar edildiğine dair kanıt bulunmadığını belirtti; sorun bulut tarafında tamamen giderildiği için müşterilerin herhangi bir işlem yapmasına gerek kalmadı. • Aynı güncelleme paketinde CVE-2026-85885, CVE-2026-85878 ve CVE-2026-87701 dahil başka kritik açıklar da kapatıldı. Kurumların hızla benimsediği AI geliştirme platformlarında maksimum ciddiyette bir açığın ortaya çıkması, yapay zeka altyapısının da klasik bulut hizmetleri kadar titiz güvenlik denetimine tabi tutulması gerektiğini gösteriyor. #SiberGüvenlik #Azure #YapayZeka
Post summary
Microsoft patched a CVSS 10.0 privilege escalation vulnerability (CVE-2026-85889) in Azure AI Foundry, discovered by researcher Rémy Marot, with no evidence of in‑the‑wild exploitation, while other critical CVEs were also addressed in the same update.
0000032
44 followersView on X
Tushar | AI & Tech@0xtsh42d
General
microsoft's own page, with the "requires no customer action" line: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85889
Post summary
The text shares a link to Microsoft's official vulnerability page for CVE-2026-85889, noting 'requires no customer action,' but lacks specific indicators for other categories like exploitation, patches, or technical details.
0000051
18 followersView on X
Bryan@so_sthbryan42d
Patch
Microsoft patched a CVSS 10.0 flaw in Azure AI Foundry. CVE-2026-85889 let an unauthenticated attacker escalate to full control: - No credentials needed to exploit - Full tenant compromise possible - Fix deployed September 2026 Check your Azure AI Foundry instances. https://thehackernews.com/2026/09/microsoft-patches-cvss-100-azure-ai.html
Post summary
Microsoft disclosed a critical CVSS 10.0 vulnerability (CVE‑2026‑85889) in Azure AI Foundry that allows unauthenticated privilege escalation leading to full tenant compromise; a patch was deployed in September 2026 and customers are urged to apply it.
0000047
284 followersView on X
Conrad Lotz@conradlotz42d
Patch
INTERESTING: Azure AI Foundry Hit with CVSS 10.0 Missing Auth Flaw Microsoft patched CVE-2026-85889 in Azure AI Foundry — missing authentication on a critical function Reply hook: How do you evaluate the blast radius of missing-auth issues in managed AI platforms you build on? https://t.co/OYxkZzPKHo
Post summary
The post announces that Microsoft has patched a critical missing authentication vulnerability (CVE-2026-85889) in Azure AI Foundry, rated CVSS 10.0, and prompts discussion on evaluating blast radius.
0000085
1.9K followersView on X
Hazem Omier@hazemomier43d
Disclosure
Microsoft (١٨ سبتمبر ٢٠٢٦): CVE-2026-85889 على Azure AI Foundry — CVSS 10.0. المشكلة: Missing authentication على function حرج. مهاجم من غير حساب يقدر يرفع صلاحياته عبر الشبكة. Foundry دي منصة بناء ونشر وإدارة تطبيقات وagents الـ AI للمؤسسات. مش bug في الموديل — bug في طبقة الـ control plane اللي بتشغّل الـ agents. Microsoft صلّحتها من طرف السيرفر. مفيش باتش عندك. مفيش دليل على استغلال في البرّية لحد دلوقتي (حسب الإفصاح). اختيار إجباري لو بتبني agents على cloud managed platform: تثق في «no customer action required» وتكمّل… ولا تطالب بـ audit trail: إيه اللي كان مكشوف، لمين، ولفترة قد إيه؟
Post summary
The text discloses CVE-2026-85889 in Azure AI Foundry, detailing its technical aspects (missing authentication, CVSS 10.0, control plane vulnerability) and confirming Microsoft’s server-side fix while explicitly stating no evidence of in-the-wild exploitation. No customer-facing patch or exploit tool is mentioned.
0000044
413 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	microsoft	azure_ai_foundry	-	-	-

Explore more

Back to dashboard microsoft CVEs azure_ai_foundry vulnerabilities

What researchers are saying

CVE-2026-85889

Ryx[verified]@PadhiyarRushiPatch

The tweet reports CVE-2026-85889, a CVSS 10.0 unauthenticated privilege escalation in Azure AI Foundry, and urges users to apply the vendor patch, indicating a Patch classification with high confidence.

Rıdvan Yağlı[verified]@ridvanyagliDisclosure

The post announces 8 critical Microsoft/Azure CVEs with CVSS scores and technical impact details but contains no PoC, exploit tool, active-exploitation claim, or patch/workaround information.

セキュリティ対策Lab[verified]@securityLab_jpPatch

The tweet reports that Microsoft fixed 18 vulnerabilities, including issues affecting Azure and Copilot, with 7 rated CVSS 10.0 and no customer-side update work required. The core message focuses on the availability of fixes rather than PoC, exploit tooling, or active exploitation.

Ned Peterson[verified]@NedPeterson99Patch

Microsoft has patched CVE-2026-85889, a missing-authentication vulnerability in Azure AI Foundry with a CVSS score of 10.0, and no exploitation has been observed.

Ned Peterson[verified]@NedPeterson99Patch

Microsoft disclosed and patched CVE-2026-85889, a critical unauthenticated privilege escalation flaw in Azure AI Foundry, mitigated server-side with no customer action required. Though no PoC or active exploitation was reported, the severity and technical details underscore the risks to AI development platforms.

Conrad Lotz[verified]@conradlotzPatch

The post announces that Microsoft fixed a missing-authentication privilege escalation issue in Azure AI Foundry with a CVSS 10.0 score and emphasizes that it is mitigated server-side. The primary focus is on the patch/mitigation rather than exploitation or PoC details.

Xcademia[verified]@xcademialtdPatch

The post announces that Microsoft has fixed a critical CVSS 10.0 privilege escalation vulnerability in Azure AI Foundry and that the issue has been mitigated server-side. It also notes that no exploitation in the wild is known.

Diario฿itcoin[verified]@DiarioBitcoinPatch

The text announces that Microsoft patched CVE-2026-85889 (CVSS 10.0, privilege escalation without authentication) in Azure AI Foundry server-side, and directs Windows 11 26H1 users to install KB5129194 for two additional fixes.