CVE-2026-35435: Azure AI Foundry Elevation of Privilege (CVSS 8.6)
CVE-2026-35435 is a high-severity privilege escalation issue (CVSS 8.6) in Azure AI Foundry M, an AI agent. Affected: Azure AI Foundry M365 published agents (pre-May 13 2026).
Is Azure AI Foundry M running on your developers' machines? Anomity finds every device with this AI agent installed, shows the version, and can block it by policy. Detect this across your developers' devices with Anomity →
Key facts
- ID
CVE-2026-35435- Severity
- high
- CVSS score
- 8.6
- Attack type
- Privilege escalation
- Component
- Azure AI Foundry M · AI agent
- Known exploited
- No known exploitation
- Published
- Last verified
What is CVE-2026-35435?
A critical access-control flaw in Azure AI Foundry's M365 published agents allowed unauthenticated remote attackers to elevate to a tenant-scoped privileged role, exposing agent definitions, prompts, connected data sources, and per-tenant LLM usage. Microsoft remediated the vulnerability in its cloud infrastructure without requiring customer action, but advised customers to audit agent activity logs for the disclosure window (April 18 → May 13). Disclosed in May 2026 Patch Tuesday.
Affected versions
| Affected | Fixed in |
|---|---|
Azure AI Foundry M365 published agents (pre-May 13 2026) | No fixed version listed |
Am I affected by CVE-2026-35435?
You are affected if you run Azure AI Foundry M365 published agents (pre-May 13 2026).
How do I fix CVE-2026-35435?
No customer patch required. Review Azure AI Foundry agent audit logs for the April 18 → May 13 window for unauthorized role assignments or prompt extractions. Rotate any secrets referenced from connected data sources during that window.
How do I find every machine running Azure AI Foundry M?
Anomity inventories the AI agents, MCP servers, IDE extensions and skills on each developer device, so you can see which machines run Azure AI Foundry M and which version, then enforce a policy on it.