# CVE-2026-68791

Azure Machine Learning incorrect authorization allows unauthorized data disclosure.

- Page: https://www.vulneraibility.com/cve/CVE-2026-68791
- CVSS: 8.6
- Known exploited: not in CISA KEV as of our last sync
- EPSS: 0.54% (percentile 45.5)
- CISA SSVC: exploitation none, automatable yes, technical impact partial (assessed 2026-09-18)
- Weakness: CWE-863
- Published: 2026-09-17

## Affected

- Microsoft Azure Machine Learning
- Azure ML Studio
- Azure ML REST APIs

## Impact

Attackers can bypass authorization to read/exfiltrate Azure ML resources (models, datasets, secrets) over the network.

## Action

Patch when possible

## Recommendation

Apply Microsoft update, review Azure ML access controls, and rotate any exposed keys/credentials.

## References

- [patch] https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68791

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.