{"id":"CVE-2026-108456","kind":"vulnerability","aliases":["CVE-2026-108456"],"related":[],"title":"Azure AI Foundry: SSRF lets authorized users escalate privileges over network","description":"Server-side request forgery (ssrf) in Azure AI Foundry allows an authorized attacker to elevate privileges over a network.","summary":"SSRF in the Azure AI Foundry managed service lets an authenticated low-privilege user make the service send requests to internal targets and read data across a security boundary (scope changed, high confidentiality impact). Microsoft says it has already fixed the service itself; the CVE is published for transparency.","severity":"high","cvss":7.7,"epss":0.00701,"exploited":false,"exploited_at":null,"products":[{"name":"Azure AI Foundry","fixed":["service-side fix applied by Microsoft"],"affected":"unknown (cloud service)","ecosystem":"vendor"}],"ecosystems":[],"tags":["azure","azure-ai-foundry","managed-service","ssrf","vendor"],"not_affected_if":["managed-hosting","no-customer-action"],"how_to_check":"Nothing to check on your side: it is a Microsoft-hosted service and the advisory lists no versions or builds. Microsoft states it is fully mitigated.","fix":"No customer action required. Microsoft fixed the service server-side (MSRC FAQ, Oct 22 2026).","status":"open","published_at":"2026-10-22T22:17:58+00:00","first_seen_at":"2026-10-23T21:57:32+00:00","triaged_at":"2026-10-25T03:10:23+00:00","updated_at":"2026-10-25T03:17:13+00:00","category":"vendor","confidence":0.9,"triage":{"at":"2026-10-25T03:10:23Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Azure AI Foundry: SSRF lets authorized users escalate privileges over network","impact":"high","summary":"Azure AI Foundry has a server-side request forgery flaw that lets a user with an account make the service send requests to internal targets. An authorized attacker can use this to elevate privileges over the network.","category":"vendor","nicknames":[],"who_cares":["azure","azure-ai-foundry"],"confidence":0.5,"needs_auth":"yes","worst_case":"Attacker with an account escalates privileges through internal requests","analyst_note":"Check the Microsoft Security Response Center advisory for CVE-2026-108456 for affected versions, fixed builds and whether any customer action is required.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.0005,"input_tokens":3306,"output_tokens":339,"severity_before":"high"},"analyst_status":"done","analyst_note":"Check the Microsoft Security Response Center advisory for CVE-2026-108456 for affected versions, fixed builds and whether any customer action is required.","search":"'-108456':14A,17A '-2026':13A,16A 'across':57B 'ai':2A,19A,24B,35B,89C 'allow':91C 'alreadi':70B 'attack':94C 'authent':41B 'author':6A,93C 'azur':1A,21B,23B,34B,88C 'azure':18A 'azure-ai-foundri':22B 'boundari':60B 'chang':62B 'confidenti':64B 'cve':12A,15A,76B 'data':56B 'elev':96C 'escal':8A 'fix':71B 'forgeri':85C 'foundri':3A,25B,36B,90C 'foundry':20A 'high':63B 'impact':65B 'intern':52B 'let':5A,39B 'low':43B 'low-privileg':42B 'make':46B 'manag':27B,37B 'managed-servic':26B 'microsoft':66B 'network':11A,100C 'privileg':9A,44B,97C 'publish':78B 'read':55B 'request':50B,84C 'say':67B 'scope':61B 'secur':59B 'send':49B 'server':82C 'server-sid':81C 'servic':28B,38B,48B,73B 'side':83C 'ssrf':4A,29B,31B,86C 'target':53B 'transpar':80B 'user':7A,45B 'vendor':30B","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{"fix":{"at":"2026-10-25T03:17:13Z","by":"analyst","run_id":687},"how_to_check":{"at":"2026-10-25T03:17:13Z","by":"analyst","run_id":687}},"analyst_revisit_at":null,"first_public_at":"2026-10-22T22:17:58+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-108456","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108456","severity":null,"published_at":"2026-10-22T22:17:58+00:00","modified_at":"2026-10-23T19:43:46+00:00","first_seen_at":"2026-10-23T21:57:32+00:00","fetched_at":"2026-10-23T22:29:03+00:00","note":null},{"source":"epss","external_id":"CVE-2026-108456","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-108456","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-24T07:15:51+00:00","fetched_at":"2026-10-24T07:15:51+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-108456:687","url":null,"severity":null,"published_at":"2026-10-25T03:17:13+00:00","modified_at":"2026-10-25T03:17:13+00:00","first_seen_at":"2026-10-25T03:17:13+00:00","fetched_at":"2026-10-25T03:17:13+00:00","note":"Read MSRC advisory (Oct 22 2026): cloud service CVE, already fully mitigated by Microsoft, no customer action; not exploited, not publicly disclosed; no build numbers. CVSS 7.7 (MSRC labels max severity Critical, kept high). Credit 7urb0. Sibling Foundry SSRF CVE-2026-85917 is a separate unauthenticated one. No social chatter checked beyond web search."}],"documents":[{"id":3102,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108456","title":"MSRC: CVE-2026-108456 Azure AI Foundry Elevation of Privilege Vulnerability","kind":"advisory","source":"analyst","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}