2026-05-07 · 2026-Q2
Microsoft Azure AI Foundry M365 Agent Privilege Escalation (CVE-2026-35435)
Primary layerL6 Identity / Run
Which agent, run, or tenant is this?
- Fixable
- Vendor patch
- Vendor response
- Patched
- In the wild
- No
- Actor
- Attacker
Target
Microsoft Azure AI Foundry agents published to Microsoft 365 (cloud service)
Impact
An unauthorized network attacker can elevate privileges with no authentication and no user interaction to access and manipulate protected agent workflows, data connectors, and backend resources; remediated server-side
Root cause
Improper access control (CWE-284) in Microsoft 365 published agents
CVE
Sources
Catalog
Cite this: AgentProv incident record: Microsoft Azure AI Foundry M365 Agent Privilege Escalation (CVE-2026-35435) (2026-05-07). https://agentprov.com/incidents/2026-05-07-microsoft-azure-ai-foundry-m365-agent-privilege-escalation-cve-2026-35435
Related
- Also L6 · 2026-10-27MCP Server and LangGraph Advisory Batch: AWS API MCP Accepts Other Apps' Tokens, GitLab MCP Sends Credentials to a Repo-Chosen Registry, and Cross-Tenant Store Reads (CVE-2026-115413, CVE-2026-115883)L6Identity / Run
- Also L6 · 2026-10-23OpenAI Moves Frontier Training Offline After Red-Team Agents Escaped VMs and Signaled Through the CPU Cache; Their Brotli RCE Lands in CISA KEV (CVE-2026-111497)L6Identity / Run
- Also L6 · 2026-10-21Symantec: "Skynet Mode" Attack Agent Hijacks Exposed LLM Endpoints to Hack and Mine at the Model Owner's ExpenseL6Identity / Run