NCSC-NL flags critical Azure OpenAI auth bypass
NCSC-NL advisory lists 20+ Microsoft Azure vulnerabilities, including a 9.8-rated unauthenticated privilege-escalation flaw in Azure OpenAI.
Sourceadvisories.ncsc.nl — open the original
What to check
- Applies to
- The 23 CVEs named below. Whether you run an affected version is not assessed: check the versions the source lists.
- Exploitation
- No exploitation in the wild and no public exploit is recorded for the CVEs named.
NCSC-NL has published a consolidated advisory covering vulnerabilities Microsoft has patched across a wide range of Azure components, including Azure OpenAI, Microsoft Graph, Azure CycleCloud, Azure Front Door, Azure File Sync, Azure Local, Azure Managed Grafana, Azure CLI, Azure Pipelines, MSAL for JavaScript and Node.js, Microsoft Entra Private Network Connector, Azure Firmware, and the Azure NFS mount helper (aznfs). Weaknesses span improper authentication and authorization checks, path traversal, OS command injection, insufficiently protected credentials, certificate revocation checks, and incorrect permission assignment.
The most severe issue, CVE-2026-119990 (CVSS 9.8), is a missing-authentication flaw in Azure OpenAI that allows an unauthenticated network attacker to gain elevated privileges. CVE-2026-114162 (CVSS 9.1) allows an already-authorized attacker to escalate privileges within Azure via insufficient authorization checks in Microsoft Graph. Other notable entries include CVE-2026-109467 (CVSS 9.9, unspecified component) and CVE-2026-114160 (CVSS 9.8) in Azure Managed Grafana, both also enabling privilege escalation. Several CycleCloud, Azure Front Door, Azure CLI, and Azure Pipelines flaws (CVSS 6.4–8.6) permit privilege escalation, arbitrary code execution, or sensitive data exposure.
The advisory does not report evidence of in-the-wild exploitation; it is a standard patch notification. Microsoft has released updates for all listed CVEs. Defenders should apply updates via the Microsoft Security Response Center portal, prioritizing Azure OpenAI and Microsoft Graph-related patches given their critical severity and network-exploitable, low-complexity nature, and review Azure CLI/Pipelines and CycleCloud environments for exposure to code-execution and data-access risks.
Mentioned in this report
Source reporting: https://advisories.ncsc.nl/2026/ncsc-2026-0475.html
Free public brief. Slack alerts on the vendors you run come with the paid plans, and a new account gets three days of them, no card.
What this brief leaves out
This page is the free tier: the write-up, the severity, the names. In the app the same report carries live profiles of the CVEs it names. The paid plans add the security research and news reporting the free tier leaves out.
It sits in a corpus of 16,445 reports from 149 sources, 666 of them written in the last seven days, and it grows through the day.
A new account starts with three days of all of it, no card, then keeps the government and CERT reporting free. Slack alerts are a paid-plan feature: name the vendors you run and Slack hears about the reports that touch them, not the rest of the week's. Nothing is charged unless you subscribe.
Create a free account What it costs