← All advisories

Unrated severityNVD Advisory· Published Apr 30, 2025· Updated Feb 26, 2026

Azure AI Bot Elevation of Privilege Vulnerability

CVE-2025-30392

Description

Improper authorization in Azure Bot Framework SDK allows an unauthorized attacker to elevate privileges over a network.

Affected products

2

Microsoft/Azure Bot Framework SDKllm-create
Microsoft/Azure Bot Servicecpe-rescue
Range: -

Patches

Vulnerability mechanics

References

1

msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30392mitrevendor-advisorypatch

News mentions

0

No linked articles in our index yet.