This vulnerability, identified as CWE-918 (Server-Side Request Forgery), affects the Azure Open AI cloud service by Microsoft. An authorized attacker can exploit SSRF to make unauthorized network requests from the server, resulting in privilege escalation and full compromise of the system's confidentiality, integrity, and availability. The vulnerability is rated critical with a CVSS 3.1 score of 9.9. Microsoft has released an official fix and manages remediation for this cloud-hosted service. No known exploits are reported in the wild at this time.

Successful exploitation allows an authorized attacker to elevate privileges over the network, leading to complete compromise of confidentiality, integrity, and availability of the affected Azure Open AI service.

Microsoft has provided an official fix for this vulnerability. As this is a cloud service, Microsoft manages the remediation server-side. Users should refer to the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45499 for detailed guidance and ensure their Azure Open AI service is updated accordingly.