{"id":"CVE-2026-119990","kind":"vulnerability","aliases":["CVE-2026-119990"],"related":[],"title":"Azure OpenAI: missing authentication lets an unauthorized attacker gain privileges","description":"Missing authentication for critical function in Azure OpenAI allows an unauthorized attacker to elevate privileges over a network.","summary":"Microsoft says Azure OpenAI has a missing-authentication flaw (CWE-306) that lets an unauthenticated attacker send a crafted request over the internet and gain elevated permissions: access orchestration information, modify workflows, or disrupt the service. CVSS 9.8. Microsoft lists it as not exploited and not publicly disclosed, with an official fix; the advisory names no versions and no customer action.","severity":"critical","cvss":9.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["azure","azure-openai","cloud-service","vendor"],"not_affected_if":[],"how_to_check":"No customer-side check published. Microsoft's advisory lists no affected versions or builds. Watch the MSRC page for CVE-2026-119990 for an affected-products table or customer instructions.","fix":null,"status":"open","published_at":"2026-11-10T19:20:24+00:00","first_seen_at":"2026-11-10T19:25:06+00:00","triaged_at":"2026-11-10T19:25:39+00:00","updated_at":"2026-11-10T19:32:03+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-11-10T19:25:39Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Azure OpenAI: missing authentication lets an unauthorized attacker gain privileges","impact":"high","summary":"Azure OpenAI has a critical function that lacks an authentication check, so an unauthorized attacker can elevate privileges over the network. NVD scores it CVSS 9.8, critical.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["azure-openai","azure"],"confidence":0.5,"fix_status":"unknown","needs_auth":"no","worst_case":"Unauthorized attacker gains elevated privileges on the Azure OpenAI service","analyst_note":"Check the Microsoft Security Response Center advisory for CVE-2026-119990 for affected scope, required configuration, and fixed status; the NVD entry gives no product ranges.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.000639,"input_tokens":4495,"output_tokens":380,"severity_before":"critical"},"analyst_status":"done","analyst_note":"Check the Microsoft Security Response Center advisory for CVE-2026-119990 for affected scope, required configuration, and fixed status; the NVD entry gives no product ranges.","search":"'-119990':13A,16A '-2026':12A,15A '-306':36B '9.8':63B 'access':53B 'action':86B 'advisori':79B 'allow':95C 'attack':8A,41B,98C 'authent':4A,33B,88C 'azur':1A,17B,19B,27B,93C 'azure-openai':18B 'cloud':22B 'cloud-servic':21B 'craft':44B 'critic':90C 'custom':85B 'cve':11A,14A 'cvss':62B 'cwe':35B 'disclos':73B 'disrupt':59B 'elev':51B,100C 'exploit':69B 'fix':77B 'flaw':34B 'function':91C 'gain':9A,50B 'inform':55B 'internet':48B 'let':5A,38B 'list':65B 'microsoft':25B,64B 'miss':3A,32B,87C 'missing-authent':31B 'modifi':56B 'name':80B 'network':104C 'offici':76B 'openai':2A,20B,28B,94C 'orchestr':54B 'permiss':52B 'privileg':10A,101C 'public':72B 'request':45B 'say':26B 'send':42B 'servic':23B,61B 'unauthent':40B 'unauthor':7A,97C 'vendor':24B 'version':82B 'workflow':57B","nicknames":[],"mitigations":[],"who_affected":"Teams using the Azure OpenAI service. The advisory gives no versions, regions or required configuration, so assume any Azure OpenAI resource is in scope until Microsoft says otherwise. Anyone not using Azure OpenAI can skip it.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["azure","azureopenai","cloudservice","critical","vendor"],"campaign_type":null,"search_a":"'-119990':13A,16A '-2026':12A,15A 'attack':8A 'authent':4A 'azur':1A 'cve':11A,14A 'gain':9A 'let':5A 'miss':3A 'openai':2A 'privileg':10A 'unauthor':7A","search_b":"'-306':36B '9.8':63B 'access':53B 'action':86B 'advisori':79B 'attack':41B 'authent':33B 'azur':17B,19B,27B 'azure-openai':18B 'cloud':22B 'cloud-servic':21B 'craft':44B 'custom':85B 'cvss':62B 'cwe':35B 'disclos':73B 'disrupt':59B 'elev':51B 'exploit':69B 'fix':77B 'flaw':34B 'gain':50B 'inform':55B 'internet':48B 'let':38B 'list':65B 'microsoft':25B,64B 'miss':32B 'missing-authent':31B 'modifi':56B 'name':80B 'offici':76B 'openai':20B,28B 'orchestr':54B 'permiss':52B 'public':72B 'request':45B 'say':26B 'send':42B 'servic':23B,61B 'unauthent':40B 'vendor':24B 'version':82B 'workflow':57B","search_c":"'allow':95C 'attack':98C 'authent':88C 'azur':93C 'critic':90C 'elev':100C 'function':91C 'miss':87C 'network':104C 'openai':94C 'privileg':101C 'unauthor':97C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:20:24+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-119990","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119990","severity":null,"published_at":"2026-11-10T19:20:24+00:00","modified_at":"2026-11-10T19:20:24+00:00","first_seen_at":"2026-11-10T19:25:06+00:00","fetched_at":"2026-11-10T19:25:06+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-119990:2518","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119990","severity":null,"published_at":"2026-11-10T19:32:03+00:00","modified_at":"2026-11-10T19:32:03+00:00","first_seen_at":"2026-11-10T19:32:03+00:00","fetched_at":"2026-11-10T19:32:03+00:00","note":"Read MSRC advisory (Nov 10 2026): CWE-306, CVSS 9.8, not exploited, not publicly disclosed, official fix level; no product/build list or customer steps published.","cites":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119990"]}],"documents":[{"id":117572,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119990","title":"MSRC: Azure OpenAI Elevation of Privilege Vulnerability CVE-2026-119990","kind":"advisory","source":"analyst","publisher":null,"text":"Missing authentication for critical function (CWE-306) in Azure OpenAI allows an unauthorized attacker to elevate privileges over a network. CVSS 3.1 9.8 base / 8.5 temporal, AV:N/AC:L/PR:N/UI:N. Released Nov 10 2026. Publicly disclosed: No. Exploited: No. Remediation level: Official Fix. No product/build list or customer action published. Unauthenticated crafted request over internet could expose orchestration information, modify workflows, disrupt service operations.","published_at":null,"relation":"advisory","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}