CVE-2025-49747: Missing authorization in Azure Machine Learning allows an authorized attacker to elevate privileges over a network.

CVE-2025-49747 is a missing authorization vulnerability (a flaw where a system fails to properly check if a user has permission to perform an action) in Azure Machine Learning that allows someone who already has some access to the system to gain elevated privileges, or higher levels of access, over a network.