InfoVulnerability
CVE-2026-119990 Azure OpenAI Elevation of Privilege Vulnerability
- Identifier
- CVE-2026-119990
- Published
- Record updated
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
Summary
Microsoft updated the Customer Action Required information and FAQ for CVE-2026-119990, an Azure OpenAI Elevation of Privilege Vulnerability. The update clarifies that Microsoft has fully mitigated the vulnerability and that no customer action is required.
Mitigation
Microsoft has fully mitigated this vulnerability; no customer action is required.
Related items
- MediumCVE-2026-83953 GitHub Copilot for Jetbrains Information Disclosure VulnerabilitySame vendor · MSRC Security Update Guide
- HighCVE-2026-110930: Codex Desktop for Windows argument injection via quoted project pathsSame vendor · NVD/CVE Database
- MediumCVE-2026-111372: AI ChatBot for WooCommerce WoowBot plugin authorization bypass in RAG syncSame vendor · NVD/CVE Database
- HighCVE-2026-107685: req_llm WebSocket streaming client accepts untrusted TLS certificatesSame vendor · NVD/CVE Database
- HighCVE-2026-108456 Azure AI Foundry Elevation of Privilege VulnerabilitySame vendor · MSRC Security Update Guide