Microsoft patches critical unauthenticated flaw in Azure OpenAI

Microsoft disclosed a critical, unauthenticated privilege-escalation vulnerability in its Azure OpenAI service, tracked as CVE-2026-119990, on November 10, 2026, as part of its November Patch Tuesday release. The company said in its advisory, CVE-2026-119990 Azure OpenAI Elevation of Privilege Vulnerability, that it fully remediated the issue on the server side and that no customer action was required.

What changed

• CVE-2026-119990 carries a CVSS 3.1 base score of 9.8, rated critical, and is classified as CWE-306, missing authentication for a critical function.
• The attack vector is network-based and requires no authentication, no privileges and no user interaction.
• An unauthenticated remote attacker could send a crafted request directly to the Azure OpenAI service backend to escalate privileges.
• Potential impact included reaching orchestration internals, altering workflows or disrupting the service.
• Microsoft remediated the flaw entirely server-side; its advisory states no customer action is required.
• Microsoft said it is not aware of the vulnerability being exploited or publicly disclosed before the fix.

What it means for people who build with AI

A critical, unauthenticated flaw in a major hosted LLM platform used by countless AI coding tools and agents shows how much attack surface now sits inside cloud model backends. Because the vulnerability needed no authentication, no privileges and no user interaction, anyone with network access to the backend could, in principle, have attempted to escalate privileges and reach orchestration internals. That the fix required zero action from customers is reassuring, but it also underlines that the security of AI applications built on Azure OpenAI depended entirely on Microsoft's own backend defenses.

Disclosure and discovery

Microsoft disclosed CVE-2026-119990 alongside its other November Patch Tuesday advisories and said it has no evidence the vulnerability was exploited or publicly disclosed before the fix shipped. The company credited a researcher who said they used Anthropic's Claude to help discover the flaw.

Sources

• CVE-2026-119990 Azure OpenAI Elevation of Privilege Vulnerability (Microsoft Security Response Center, November 10, 2026, official)

Written with AI assistance, strictly from the sources listed above. Before it went live, automated checks verified its dates, sources and every language edition.