What happened
CVE-2026-108456 is an SSRF (CWE-918) in Azure AI Foundry allowing an authorized attacker to elevate privileges over a network. CVSS 7.7 (changed scope, confidential impact), published 2026-10-22. Microsoft marks it exclusively-hosted-service and fixed it service-side.
Why it matters
In an enterprise GenAI platform, SSRF from an authenticated user can be used to reach internal metadata/control endpoints and escalate privileges — a path to disclosure of model keys, tenant secrets, and internal infrastructure behind an AI service boundary.
Attack vector
Server-side request forgery (CWE-918) in Azure AI Foundry allows an authorized attacker to elevate privileges over a network; an authenticated user can abuse the SSRF to reach internal/privileged resources reachable by the Foundry service.
Affected systems
Microsoft Azure AI Foundry (hosted service)
Mitigation
Microsoft fixed this service-side (cloud-hosted). No customer action required, but confirm you are on the patched service; restrict which principals can trigger outbound fetch-like operations and monitor for SSRF activity. MSRC advisory CVE-2026-108456.