# CVE-2026-85917: Microsoft Azure AI Foundry server-side request forgery

Source: https://junglewise.ai/threats/cve-2026-85917-server-side-request-forgery-ssrf-in-azure-ai-foundry-allows-an  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-17. Updated: 2026-09-26  
License: CC BY 4.0 with a link back

CVE-2026-85917 · Severity: high · CVSS 7.5 · Published 2026-09-17

Azure AI Foundry, Microsoft's platform for building and managing AI applications, contains a server-side request forgery (SSRF) vulnerability that allows an attacker to make unauthorized requests from the server. An attacker can exploit this to access internal resources or sensitive data, potentially escalating their privileges within the Azure environment.

Technologies: [Microsoft Azure Ai Foundry](https://junglewise.ai/threats/technologies/azure-ai-foundry). Vendors: [Microsoft](https://junglewise.ai/threats/vendors/microsoft).

## Quick answers

**Is CVE-2026-85917 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-85917 being exploited in the wild.

**How severe is CVE-2026-85917?** High severity, with a CVSS score of 7.5, published 17 September 2026.

**Which products and versions are affected?** Microsoft Azure AI Foundry.

**Is there a fix for CVE-2026-85917?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-85917 attacked?** It is attacked over the network, in a hosted service.

**Am I affected by CVE-2026-85917?** Check whether you run Microsoft Azure Ai Foundry or Microsoft Foundry. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability is a server-side request forgery in Azure AI Foundry that permits privilege escalation over a network from an unauthenticated attacker position. The SSRF flaw allows an attacker to craft requests that the server will execute against internal resources, potentially bypassing authentication controls and accessing restricted endpoints or data. Exploitation requires network access to the affected service.

## Affected products

- Microsoft Azure AI Foundry

## Timeline

- 2026-09-17: disclosed

## References

- [https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85917](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85917)

## Related threats

- [Azure AI Foundry server-side request forgery](https://junglewise.ai/threats/cve-2026-108456-server-side-request-forgery-ssrf-in-azure-ai-foundry-allows-an)
- [Microsoft Azure AI Foundry missing authentication for critical function](https://junglewise.ai/threats/cve-2026-85889-missing-authentication-for-critical-function-in-azure-ai-foundry)
- [Improper access control in Azure AI Foundry M365 published agents allows an unauthorized attacker to elevate privileges over a network.](https://junglewise.ai/threats/cve-2026-35435-improper-access-control-in-azure-ai-foundry-m365-published-agents)
- [Microsoft Azure AI Foundry privilege escalation](https://junglewise.ai/threats/cve-2026-32213-microsoft-azure-ai-foundry-privilege-escalation)