This vulnerability, tracked as CVE-2026-45499 and classified under CWE-918 (Server-Side Request Forgery), affects the Microsoft Azure Open AI cloud service. It enables an attacker with authorized access to perform SSRF attacks, which can be leveraged to escalate privileges within the network environment. The CVSS v3.1 base score is 9.9, indicating critical severity with network attack vector, low attack complexity, and no user interaction required. The vulnerability impacts confidentiality, integrity, and availability with a scope change. Microsoft has issued an official fix and manages remediation for this cloud service.

An authorized attacker exploiting this SSRF vulnerability can elevate privileges over the network, potentially gaining unauthorized access to sensitive resources and causing full compromise of the affected system's confidentiality, integrity, and availability. The vulnerability's critical CVSS score reflects its severe impact.

Microsoft has released an official fix for this vulnerability and manages remediation for the Azure Open AI cloud service. Users should follow the guidance in the Microsoft security advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45499 to ensure their environment is protected. No additional mitigation actions are required beyond applying the official fix.