CVE-2026-32211

Missing authentication for critical function in Azure MCP Server allows an unauthorized attacker to disclose information over a network...

CVE-2026-32211

Missing authentication for critical function in Azure MCP Server allows an unauthorized attacker to disclose information over a network...

Server-side Request Forgery (SSRF)

Overview Azure.Mcp is an All Azure MCP tools in a single server. The Azure MCP Server implements the MCP specification to create a seamless connection between AI agents and Azure services. Azure MCP Server can be used alone or with the GitHub Copilot for Azure extension in VS Code. Affected...

CVE-2026-26118

Server-side request forgery ssrf in Azure MCP Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-26118

Server-side request forgery ssrf in Azure MCP Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-26118

Server-side request forgery ssrf in Azure MCP Server allows an authorized attacker to elevate privileges over a network...

Azure MCP Server Tools Elevation of Privilege Vulnerability

Server-side request forgery ssrf in Azure MCP Server allows an authorized attacker to elevate privileges over a network...

PT-2026-24328

Name of the Vulnerable Software and Affected Versions Azure MCP Server affected versions not specified Description An authorized attacker can exploit a server-side request forgery SSRF condition in Azure MCP Server to gain elevated privileges on a network. SSRF occurs when an application makes...

Azure MCP Server has Server-Side Request Forgery issue that allows authorized attacker to elevate privileges over a network

Server-Side Request Forgery SSRF in Azure MCP Server allows an authorized attacker to elevate privileges over a network...

MAL-2025-192601 Malicious code in vscode-azure-mcp-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee81b2442f4cf9659439b86f4d75212f59a5471403e97b4720448df2997d1561 The package vscode-azure-mcp-server was found to contain malicious code. Source: ghsa-malware...

Malicious code in vscode-azure-mcp-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee81b2442f4cf9659439b86f4d75212f59a5471403e97b4720448df2997d1561 The package vscode-azure-mcp-server was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-203811

Malicious code in vscode-azure-mcp-server npm...