# CVE-2026-32211: CVE-2026-32211: Azure MCP Server Authentication Flaw Exposes Sensitive Data (CVSS 9.1)

> CVE-2026-32211 is a critical-severity authentication bypass issue (CVSS 9.1) in Azure MCP Server, a MCP server. Affected: Azure MCP Server (Microsoft-hosted: patched; on-prem: update required).

- **Canonical URL:** https://catalog.anomity.ai/vuln/cve-2026-32211
- **Aliases:** ti-027
- **Severity:** critical
- **CVSS:** 9.1
- **Attack type:** Authentication bypass
- **Component:** Azure MCP Server (MCP server)
- **Exploited in the wild:** no known exploitation
- **Published:** 2026-05-16
- **Last verified:** 2026-11-01
- **JSON:** https://catalog.anomity.ai/api/entries/vuln/cve-2026-32211

## Summary

Microsoft's Azure MCP Server contained an authentication-bypass flaw that let unauthenticated callers query resource inventories, list connected agent identities, and retrieve fragments of cached responses including subscription IDs and resource names. Hosted by an estimated 12% of Microsoft's enterprise AI customers, exposure was broad. Microsoft patched server-side; customer-run on-prem deployments must update the MCP server binary manually.

## Affected versions

| Affected | Fixed in |
| --- | --- |
| Azure MCP Server (Microsoft-hosted: patched; on-prem: update required) | no fixed version listed |

## Am I affected by CVE-2026-32211?

You are affected if you run Azure MCP Server (Microsoft-hosted: patched; on-prem: update required).

## How do I fix CVE-2026-32211?

On-prem deployments: update the Azure MCP Server binary to the May 16 release. Review Azure activity logs since April for unauthenticated MCP query patterns. Apply least-privilege RBAC to MCP-registered service principals.

## How do I find every machine running Azure MCP Server?

Anomity inventories the AI agents, MCP servers, IDE extensions and skills on each developer device, so you can see which machines run Azure MCP Server and which version, then enforce a policy on it.

## References

- article: https://windowsnews.ai/article/cve-2026-32211-critical-azure-mcp-server-authentication-flaw-exposes-sensitive-data-cvss-91.409622
- cve: https://nvd.nist.gov/vuln/detail/CVE-2026-32211

## Related vulnerabilities

- [GHSA-53mr-w429-c597](https://catalog.anomity.ai/vuln/ghsa-53mr-w429-c597) — high
- [CVE-2026-114090](https://catalog.anomity.ai/vuln/cve-2026-114090) — high
- [GHSA-7xgj-8392-5q4r](https://catalog.anomity.ai/vuln/ghsa-7xgj-8392-5q4r) — medium
- [CVE-2026-114612](https://catalog.anomity.ai/vuln/cve-2026-114612) — critical
- [CVE-2026-103091](https://catalog.anomity.ai/vuln/cve-2026-103091) — critical
- [CVE-2026-109527](https://catalog.anomity.ai/vuln/cve-2026-109527) — high

---

Source: Anomity Security Database (https://catalog.anomity.ai/vuln). Detect affected AI tools on developer devices: https://anomity.ai/?utm_source=catalog&utm_medium=vuln-md&utm_campaign=cve-2026-32211