What happened
Microsoft disclosed CVE-2026-62830 (CVSS 9.9) on August 6, 2026, an elevation-of-privilege vulnerability in Azure SRE Agent, an autonomous AI agent that executes runbooks and modifies cloud infrastructure during incident response. Missing authorization in the agent's OBO flow lets an authorized attacker escalate privileges over the network, breaking the authority-enforcement boundary meant to scope the agent's tenant access.
Why it matters
Azure SRE Agent is a production autonomous AI agent with standing infrastructure-modification privileges; a privilege-escalation bug in its authorization boundary means a single compromised or malicious low-privilege caller could pivot the agent into acting across tenant-scoped resources it was never meant to touch — a direct agentic-AI blast-radius amplification bug in widely-deployed enterprise cloud tooling.
Attack vector
The agent's on-behalf-of (OBO) elevation flow fails to enforce authorization boundaries (CWE-862: Missing Authorization), allowing an authorized attacker to break the security boundary and escalate privileges to reach resources across the broader infrastructure the agent manages — a Scope Changed (S:C) vector that extends blast radius beyond the agent itself.
Affected systems
Microsoft Azure SRE Agent (all versions prior to fix)
Mitigation
Apply Microsoft's August 2026 Patch Tuesday update; review Azure SRE Agent managed identity permissions per MSRC guidance.