CVE-2026-45499

Critical · CVSS 9.9

Azure OpenAI — Server-Side Request Forgery (SSRF) privilege escalation

CVSS: 9.9; nvd
EPSS: 0.62%; 45th pct
KEV: No
Class: other; CWE-918

Description

Server-side request forgery (ssrf) in Azure OpenAI allows an authorized attacker to elevate privileges over a network.

Search profile — drives PoC discovery

Symbols Azure OpenAISSRFprivilege escalationnetwork request forgeryauthorized attackerCWE-918

Keywords CVE-2026-45499Azure OpenAI SSRFAzure OpenAI privilege escalationAzure OpenAI server-side request forgeryMSRC CVE-2026-45499Azure OpenAI CVECWE-918 Azure OpenAI

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45499

Status: enriched · ingested 2026-07-07T18:00:32.000Z · profiled 2026-07-07T18:30:32.000Z