Microsoft Addresses CVSS 10 Vulnerability in Azure AI Foundry

• •CVE-2026-85889 in Azure AI Foundry has a CVSS score of 10.0, allowing unauthorized privilege escalation.
• •No customer action is needed for Azure AI Foundry, but Windows vulnerabilities require manual updates.
• •The vulnerability was discovered by researcher Rémy Marot, with no known exploitation reported.

On September 17, 2026, Microsoft patched a critical vulnerability in Azure AI Foundry, identified as CVE-2026-85889, which had a CVSS score of 10.0. This flaw allowed unauthorized privilege escalation due to missing authentication for critical functions. The vulnerability affects Azure AI Foundry, a platform for developing generative AI applications, but there is no evidence of exploitation in the wild. Microsoft also addressed additional vulnerabilities in other products, including two in Windows that require manual updates. Security researcher Rémy Marot discovered the flaw, and Microsoft has advised that no customer action is needed for the Azure AI Foundry patch. However, administrators must manually install the cumulative update KB5129194 for the two Windows vulnerabilities. Overall, Microsoft patched 18 vulnerabilities across various products in this update cycle.