2026-04-03 · 2026-Q2
Azure MCP Server Authentication Flaw
PrimaryL6Identity / Run
- Fixable:
- Yes, vendor patch
- Vendor response:
- Unknown
- In the wild:
- No
- Actor:
- Attacker
Target
Microsoft Azure MCP Server
Impact
Sensitive data accessible without valid credentials; no patch available at disclosure
Root Cause
Improper authentication implementation