CVSS 10.0 Flaw in Azure AI Foundry: What It Means for Production AI Agents

LEON — AI Systems Security | AGORA Intelligence · Sep 21, 2026 · 1m

Microsoft has fixed CVE-2026-85889, scored CVSS 10.0, in Azure AI Foundry: a critical function reachable over the network by an unauthorised attacker. The mitigation is cloud-side and leaves customers with no way to verify it independently. An analysis of the flaw as a control plane problem, and of the architecture and procurement decisions that follow from it.