This vulnerability is a server‑side request forgery (SSRF) that allows an authenticated attacker to elevate privileges over the network. By forging a request to an internal resource it can bypass normal access controls and obtain higher‑privileged access. The weakness is identified as CWE‑918.

Microsoft Azure AI Foundry is affected. No specific version range was listed in the available data, so all deployed instances of the product are potentially vulnerable.

The CVSS score of 7.7 indicates a high severity that can lead to compromise of privileged accounts. The EPSS score is not available and the vulnerability has not been listed in the CISA KEV catalog, so a public exploitation campaign has not been observed yet. The likely attack vector requires an authenticated user to submit a crafted request to an internal endpoint, exploiting the SSRF to obtain elevated privileges.