Microsoft has released fixes for a critical security vulnerability in Azure AI Foundry, tracked as CVE-2026-85889, with a CVSS score of 10.0. The flaw stems from missing authentication and could allow unauthorized privilege escalation.
The patch is part of a larger update. SecurityWeek reports that Microsoft fixed 18 vulnerabilities across its AI and cloud products, with privilege escalation flaws accounting for the majority. Both sources agree on the importance of the update, though The Hacker News focuses on the single most severe issue.
The Hacker News notes that no customer action is required, while SecurityWeek's summary does not address customer action. This difference aside, the two reports align on the scope of the fixes and the emphasis on privilege escalation.