Improper authorization in Microsoft Azure AI Foundry allows an attacker with network access to bypass controls and gain higher privileges. Once elevated, the attacker can read, modify, or delete AI models, training data, or configuration settings, compromising confidentiality, integrity, and potentially availability. The weakness corresponds to improper authorization and privilege or access control defects.

Microsoft Azure AI Foundry is affected. No version information is provided, suggesting the flaw exists across current releases of the service.

The severity is high, reflected in a score of 10, labeling it critical. Exploit probability is low, with an estimate below 1%, and it is not listed in the Known Exploited Vulnerabilities catalog. Attackers must reach the Azure AI Foundry instance over the network, implying a network‑based attack surface. Without remediation, a successful privilege escalation could allow extensive harm to the AI models and associated data.