CVE-2026-26118
CVE-2026-26118 · Azure MCP Server Tools Elevation of Privilege Vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Server-side request forgery (ssrf) in Azure MCP Server allows an authorized attacker to elevate privileges over a network.
CVSS 8.8 · High · EPSS 1.0% · Fix available
- Published
- Updated
Affected products and versions
azure mcp server tools 1.0.0 (npm)
- Versions
- ≥ 1.0.0, < 1.0.2: Affected (custom)
Update to 1.0.2
azure mcp server tools 1.0.0 (nuget)
- Versions
- ≥ 1.0.0, < 1.0.2: Affected (custom)
Update to 1.0.2
azure mcp server tools 2.0.0 (npm)
- Versions
- ≥ 2.0.0-beta.1, < 2.0.0-beta.17: Affected (custom)
Update to 2.0.0-beta.17
azure mcp server tools 2.0.0 (nuget)
- Versions
- ≥ 2.0.0-beta.1, < 2.0.0-beta.17: Affected (custom)
Update to 2.0.0-beta.17
azure mcp server tools 2.0.0 (pypi)
- Versions
- ≥ 2.0.0-beta.1, < 2.0.0-beta.17: Affected (custom)
Update to 2.0.0-beta.17
azure.mcp NuGet
- Affected ranges
- ECOSYSTEM: ≥ 2.0.0-beta.1, < 2.0.0-beta.17
Update to 2.0.0-beta.17
azure.mcp NuGet
- Versions
- 1.0.0
- 1.0.1
- Affected ranges
- ECOSYSTEM: ≥ 1.0.0, < 1.0.2
Update to 1.0.2
@azure/mcp npm
- Affected ranges
- SEMVER: ≥ 2.0.0-beta.1, < 2.0.0-beta.17
Update to 2.0.0-beta.17
msmcp-azure PyPI
- Affected ranges
- ECOSYSTEM: ≥ 2.0.0b14, < 2.0.0b17
Update to 2.0.0b17
@azure/mcp npm
- Affected ranges
- SEMVER: ≥ 1.0.0, < 1.0.2
Update to 1.0.2