Azure MCP Server Tools Elevation of Privilege Vulnerability
To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-26118US | — | Exploit | ||
Server-side request forgery (ssrf) in Azure MCP Server allows an authorized attacker to elevate privileges over a network. | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (5)
- BehobenAzure MCP Server Tools 1.0.0 (NuGet)
1.0.2:Security Update:https://github.com/microsoft/mcp/blob/main/servers/Azure.Mcp.Server/CHANGELOG.md
https://github.com/microsoft/mcp/blob/main/servers/Azure.Mcp.Server/CHANGELOG.md - BehobenAzure MCP Server Tools 1.0.0 (npm)
1.0.2:Security Update:https://github.com/microsoft/mcp/blob/main/servers/Azure.Mcp.Server/CHANGELOG.md
https://github.com/microsoft/mcp/blob/main/servers/Azure.Mcp.Server/CHANGELOG.md - BehobenAzure MCP Server Tools 2.0.0 (NuGet)
2.0.0-beta.17:Security Update:https://github.com/microsoft/mcp/blob/main/servers/Azure.Mcp.Server/CHANGELOG.md
https://github.com/microsoft/mcp/blob/main/servers/Azure.Mcp.Server/CHANGELOG.md - BehobenAzure MCP Server Tools 2.0.0 (PyPi)
2.0.0-beta.17:Security Update:https://github.com/microsoft/mcp/blob/main/servers/Azure.Mcp.Server/CHANGELOG.md
https://github.com/microsoft/mcp/blob/main/servers/Azure.Mcp.Server/CHANGELOG.md - BehobenAzure MCP Server Tools 2.0.0 (npm)
2.0.0-beta.17:Security Update:https://github.com/microsoft/mcp/blob/main/servers/Azure.Mcp.Server/CHANGELOG.md
https://github.com/microsoft/mcp/blob/main/servers/Azure.Mcp.Server/CHANGELOG.md
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan