{"id":"CVE-2026-26118","state":"PUBLISHED","title":"Azure MCP Server Tools Elevation of Privilege Vulnerability","description":"Server-side request forgery (ssrf) in Azure MCP Server allows an authorized attacker to elevate privileges over a network.","publishedAt":"2026-03-10T17:05:21.115Z","updatedAt":"2026-06-19T18:18:08.772Z","severity":{"score":8.8,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","source":"microsoft"},"assigner":"microsoft","products":["Microsoft Azure MCP Server Tools 1.0.0 (npm)","Microsoft Azure MCP Server Tools 1.0.0 (NuGet)","Microsoft Azure MCP Server Tools 2.0.0 (npm)","Microsoft Azure MCP Server Tools 2.0.0 (NuGet)","Microsoft Azure MCP Server Tools 2.0.0 (PyPi)"],"affected":[{"vendor":"Microsoft","product":"Azure MCP Server Tools 1.0.0 (npm)","versions":[{"version":"1.0.0","status":"affected","lessThan":"1.0.2","versionType":"custom"}]},{"vendor":"Microsoft","product":"Azure MCP Server Tools 1.0.0 (NuGet)","versions":[{"version":"1.0.0","status":"affected","lessThan":"1.0.2","versionType":"custom"}]},{"vendor":"Microsoft","product":"Azure MCP Server Tools 2.0.0 (npm)","versions":[{"version":"2.0.0-beta.1","status":"affected","lessThan":"2.0.0-beta.17","versionType":"custom"}]},{"vendor":"Microsoft","product":"Azure MCP Server Tools 2.0.0 (NuGet)","versions":[{"version":"2.0.0-beta.1","status":"affected","lessThan":"2.0.0-beta.17","versionType":"custom"}]},{"vendor":"Microsoft","product":"Azure MCP Server Tools 2.0.0 (PyPi)","versions":[{"version":"2.0.0-beta.1","status":"affected","lessThan":"2.0.0-beta.17","versionType":"custom"}]}],"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26118"],"weaknesses":["CWE-918"],"ingestedAt":"2026-10-29T20:11:21.040Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/26xxx/CVE-2026-26118.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-26118","state":"PUBLISHED","datePublished":"2026-03-10T17:05:21.115Z","dateUpdated":"2026-06-19T18:18:08.772Z","assignerShortName":"microsoft","assignerOrgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","dateReserved":"2026-02-11T15:52:13.911Z"},"containers":{"cna":{"title":"Azure MCP Server Tools Elevation of Privilege Vulnerability","descriptions":[{"lang":"en-US","value":"Server-side request forgery (ssrf) in Azure MCP Server allows an authorized attacker to elevate privileges over a network."}],"affected":[{"vendor":"Microsoft","product":"Azure MCP Server Tools 1.0.0 (npm)","versions":[{"version":"1.0.0","status":"affected","lessThan":"1.0.2","versionType":"custom"}]},{"vendor":"Microsoft","product":"Azure MCP Server Tools 1.0.0 (NuGet)","versions":[{"version":"1.0.0","status":"affected","lessThan":"1.0.2","versionType":"custom"}]},{"vendor":"Microsoft","product":"Azure MCP Server Tools 2.0.0 (npm)","versions":[{"version":"2.0.0-beta.1","status":"affected","lessThan":"2.0.0-beta.17","versionType":"custom"}]},{"vendor":"Microsoft","product":"Azure MCP Server Tools 2.0.0 (NuGet)","versions":[{"version":"2.0.0-beta.1","status":"affected","lessThan":"2.0.0-beta.17","versionType":"custom"}]},{"vendor":"Microsoft","product":"Azure MCP Server Tools 2.0.0 (PyPi)","versions":[{"version":"2.0.0-beta.1","status":"affected","lessThan":"2.0.0-beta.17","versionType":"custom"}]}],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26118","name":"Azure MCP Server Tools Elevation of Privilege Vulnerability","tags":["vendor-advisory","patch"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","baseSeverity":"HIGH","baseScore":8.8,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-918","description":"CWE-918: Server-Side Request Forgery (SSRF)","lang":"en-US","type":"CWE"}]}],"providerMetadata":{"shortName":"microsoft","orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","dateUpdated":"2026-06-19T18:18:08.772Z"},"datePublic":"2026-03-10T14:00:00.000Z","cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_mcp_server_tools_2:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0-beta.1","versionEndExcluding":"2.0.0-beta.17"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_mcp_server_tools_2:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0-beta.1","versionEndExcluding":"2.0.0-beta.17"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_mcp_server_tools_2:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0-beta.1","versionEndExcluding":"2.0.0-beta.17"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_mcp_server_tools_1:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"1.0.2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_mcp_server_tools_1:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"1.0.2"}]}]}]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-03-05T00:00:00+00:00","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3","id":"CVE-2026-26118"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-03-11T03:56:21.634Z"}}]}}}