{
  "entry": {
    "kind": "vuln",
    "slug": "cve-2026-35435",
    "name": "CVE-2026-35435",
    "vendor": "Azure AI Foundry M",
    "description": "A critical access-control flaw in Azure AI Foundry's M365 published agents allowed unauthenticated remote attackers to elevate to a tenant-scoped privileged role, exposing agent definitions, prompts, connected data sources, and per-tenant LLM usage. Microsoft remediated the vulnerability in its cloud infrastructure without requiring customer action, but advised customers to audit agent activity logs for the disclosure window (April 18 → May 13). Disclosed in May 2026 Patch Tuesday.",
    "website": "https://www.tenable.com/blog/microsofts-may-2026-patch-tuesday-addresses-118-cves-cve-2026-41103",
    "repository": null,
    "documentationUrl": null,
    "license": null,
    "version": null,
    "trustLevel": "advisory",
    "capabilities": [],
    "packaging": null,
    "configFiles": null,
    "category": "agent",
    "updatedAt": "2026-05-13",
    "risk": {
      "score": 86,
      "band": "high",
      "signals": [],
      "dangerousCombos": []
    },
    "dangerousCombos": [],
    "vuln": {
      "id": "CVE-2026-35435",
      "aliases": [
        "ti-024"
      ],
      "title": "CVE-2026-35435: Azure AI Foundry Elevation of Privilege (CVSS 8.6)",
      "summary": "A critical access-control flaw in Azure AI Foundry's M365 published agents allowed unauthenticated remote attackers to elevate to a tenant-scoped privileged role, exposing agent definitions, prompts, connected data sources, and per-tenant LLM usage. Microsoft remediated the vulnerability in its cloud infrastructure without requiring customer action, but advised customers to audit agent activity logs for the disclosure window (April 18 → May 13). Disclosed in May 2026 Patch Tuesday.",
      "severity": "high",
      "cvss": {
        "score": 8.6,
        "vector": null,
        "version": null
      },
      "cwe": [],
      "attackType": [
        "Privilege escalation"
      ],
      "componentType": "agent",
      "component": {
        "name": "Azure AI Foundry M",
        "vendor": null,
        "package": null,
        "ecosystem": null,
        "catalogSlug": null
      },
      "affected": [
        {
          "range": "Azure AI Foundry M365 published agents (pre-May 13 2026)",
          "fixed": null
        }
      ],
      "exploited": false,
      "exploitPublic": false,
      "publishedAt": "2026-05-13",
      "modifiedAt": "2026-05-13",
      "lastVerified": "2026-11-01",
      "references": [
        {
          "type": "article",
          "url": "https://www.tenable.com/blog/microsofts-may-2026-patch-tuesday-addresses-118-cves-cve-2026-41103"
        },
        {
          "type": "cve",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35435"
        }
      ],
      "mitigation": "No customer patch required. Review Azure AI Foundry agent audit logs for the April 18 → May 13 window for unauthorized role assignments or prompt extractions. Rotate any secrets referenced from connected data sources during that window.",
      "detectedByAnomity": true
    }
  }
}