{
  "entry": {
    "kind": "vuln",
    "slug": "cve-2026-32211",
    "name": "CVE-2026-32211",
    "vendor": "Azure MCP Server",
    "description": "Microsoft's Azure MCP Server contained an authentication-bypass flaw that let unauthenticated callers query resource inventories, list connected agent identities, and retrieve fragments of cached responses including subscription IDs and resource names. Hosted by an estimated 12% of Microsoft's enterprise AI customers, exposure was broad. Microsoft patched server-side; customer-run on-prem deployments must update the MCP server binary manually.",
    "website": "https://windowsnews.ai/article/cve-2026-32211-critical-azure-mcp-server-authentication-flaw-exposes-sensitive-data-cvss-91.409622",
    "repository": null,
    "documentationUrl": null,
    "license": null,
    "version": null,
    "trustLevel": "advisory",
    "capabilities": [],
    "packaging": null,
    "configFiles": null,
    "category": "mcp-server",
    "updatedAt": "2026-05-16",
    "risk": {
      "score": 91,
      "band": "critical",
      "signals": [],
      "dangerousCombos": []
    },
    "dangerousCombos": [],
    "vuln": {
      "id": "CVE-2026-32211",
      "aliases": [
        "ti-027"
      ],
      "title": "CVE-2026-32211: Azure MCP Server Authentication Flaw Exposes Sensitive Data (CVSS 9.1)",
      "summary": "Microsoft's Azure MCP Server contained an authentication-bypass flaw that let unauthenticated callers query resource inventories, list connected agent identities, and retrieve fragments of cached responses including subscription IDs and resource names. Hosted by an estimated 12% of Microsoft's enterprise AI customers, exposure was broad. Microsoft patched server-side; customer-run on-prem deployments must update the MCP server binary manually.",
      "severity": "critical",
      "cvss": {
        "score": 9.1,
        "vector": null,
        "version": null
      },
      "cwe": [],
      "attackType": [
        "Authentication bypass"
      ],
      "componentType": "mcp-server",
      "component": {
        "name": "Azure MCP Server",
        "vendor": null,
        "package": null,
        "ecosystem": null,
        "catalogSlug": null
      },
      "affected": [
        {
          "range": "Azure MCP Server (Microsoft-hosted: patched; on-prem: update required)",
          "fixed": null
        }
      ],
      "exploited": false,
      "exploitPublic": false,
      "publishedAt": "2026-05-16",
      "modifiedAt": "2026-05-16",
      "lastVerified": "2026-11-01",
      "references": [
        {
          "type": "article",
          "url": "https://windowsnews.ai/article/cve-2026-32211-critical-azure-mcp-server-authentication-flaw-exposes-sensitive-data-cvss-91.409622"
        },
        {
          "type": "cve",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32211"
        }
      ],
      "mitigation": "On-prem deployments: update the Azure MCP Server binary to the May 16 release. Review Azure activity logs since April for unauthenticated MCP query patterns. Apply least-privilege RBAC to MCP-registered service principals.",
      "detectedByAnomity": true
    }
  }
}