Skip to content

CVE-2026-119990 Azure OpenAI Elevation of Privilege Vulnerability

CriticalCVSS 9.8
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Missing authentication for critical function in Azure OpenAI allows an unauthorized attacker to elevate privileges over a network.

Affected products

ProductAffected versionsFixed in
Microsoft azure open-ai < hyena-infra-build-official/20260923.14 hyena-infra-build-official/20260923.14
Microsoft Azure Open AI >= 1.0.0, < hyena-infra-build-official/20260923.14 hyena-infra-build-official/20260923.14

References