# NCSC-NL flags critical Azure OpenAI auth bypass

Published: 2026-11-10 · Severity: routine · Sectors: Technology
Canonical: https://vorant.io/reports/6c113877-1957-593d-832b-337806f3a9d6/ncsc-nl-flags-critical-azure-openai-auth-bypass
Vorant's rating weighs the evidence in the report: confirmed exploitation, victims claimed, CVSS and EPSS, and how many sources agree. It rates the report, not your assets.

> NCSC-NL advisory lists 20+ Microsoft Azure vulnerabilities, including a 9.8-rated unauthenticated privilege-escalation flaw in Azure OpenAI.

Source: advisories.ncsc.nl — https://advisories.ncsc.nl/2026/ncsc-2026-0475.html

## What to check

- Applies to: The 23 CVEs named below. Whether you run an affected version is not assessed: check the versions the source lists.
- Exploitation: No exploitation in the wild and no public exploit is recorded for the CVEs named.

NCSC-NL has published a consolidated advisory covering vulnerabilities Microsoft has patched across a wide range of Azure components, including Azure OpenAI, Microsoft Graph, Azure CycleCloud, Azure Front Door, Azure File Sync, Azure Local, Azure Managed Grafana, Azure CLI, Azure Pipelines, MSAL for JavaScript and Node.js, Microsoft Entra Private Network Connector, Azure Firmware, and the Azure NFS mount helper (aznfs). Weaknesses span improper authentication and authorization checks, path traversal, OS command injection, insufficiently protected credentials, certificate revocation checks, and incorrect permission assignment.

The most severe issue, CVE-2026-119990 (CVSS 9.8), is a missing-authentication flaw in Azure OpenAI that allows an unauthenticated network attacker to gain elevated privileges. CVE-2026-114162 (CVSS 9.1) allows an already-authorized attacker to escalate privileges within Azure via insufficient authorization checks in Microsoft Graph. Other notable entries include CVE-2026-109467 (CVSS 9.9, unspecified component) and CVE-2026-114160 (CVSS 9.8) in Azure Managed Grafana, both also enabling privilege escalation. Several CycleCloud, Azure Front Door, Azure CLI, and Azure Pipelines flaws (CVSS 6.4–8.6) permit privilege escalation, arbitrary code execution, or sensitive data exposure.

The advisory does not report evidence of in-the-wild exploitation; it is a standard patch notification. Microsoft has released updates for all listed CVEs. Defenders should apply updates via the Microsoft Security Response Center portal, prioritizing Azure OpenAI and Microsoft Graph-related patches given their critical severity and network-exploitable, low-complexity nature, and review Azure CLI/Pipelines and CycleCloud environments for exposure to code-execution and data-access risks.

## Mentioned in this report

- Vulnerabilities: CVE-2026-102224, CVE-2026-105494, CVE-2026-105734, CVE-2026-108469, CVE-2026-108470, CVE-2026-109457, CVE-2026-109460, CVE-2026-109462, CVE-2026-109467, CVE-2026-112745, CVE-2026-113822, CVE-2026-113823, CVE-2026-114160, CVE-2026-114161, CVE-2026-114162, CVE-2026-118288, CVE-2026-118742, CVE-2026-119989, CVE-2026-119990, CVE-2026-120783, CVE-2026-121668, CVE-2026-122986, CVE-2026-85923

Source reporting: https://advisories.ncsc.nl/2026/ncsc-2026-0475.html

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/6c113877-1957-593d-832b-337806f3a9d6/ncsc-nl-flags-critical-azure-openai-auth-bypass.
In the app the same report carries live profiles of the CVEs it names. The paid plans add the security research and news reporting the free tier leaves out. Slack alerts on the vendors, sectors and countries a reader follows come with the paid plans too. A new account starts with a three-day trial, no card: https://vorant.io/signup