Security Advisory catalog PYSEC-2026-2669 PYSEC-2026-2669 Published
Azure MCP Server Tools Elevation of Privilege Vulnerability
cve-program · CVE-2026-26118 Published Azure MCP Server Tools 1.0.0 (npm) Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Microsoft",
"product": "Azure MCP Server Tools 1.0.0 (npm)",
"versions": [
{
"version": "1.0.0",
"lessThan": "1.0.2",
"versionType": "custom",
"status": "affected"
}
]
} Azure MCP Server Tools 1.0.0 (NuGet) Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Microsoft",
"product": "Azure MCP Server Tools 1.0.0 (NuGet)",
"versions": [
{
"version": "1.0.0",
"lessThan": "1.0.2",
"versionType": "custom",
"status": "affected"
}
]
} Azure MCP Server Tools 2.0.0 (npm) Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Microsoft",
"product": "Azure MCP Server Tools 2.0.0 (npm)",
"versions": [
{
"version": "2.0.0-beta.1",
"lessThan": "2.0.0-beta.17",
"versionType": "custom",
"status": "affected"
}
]
} Azure MCP Server Tools 2.0.0 (NuGet) Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Microsoft",
"product": "Azure MCP Server Tools 2.0.0 (NuGet)",
"versions": [
{
"version": "2.0.0-beta.1",
"lessThan": "2.0.0-beta.17",
"versionType": "custom",
"status": "affected"
}
]
} Azure MCP Server Tools 2.0.0 (PyPi) Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Microsoft",
"product": "Azure MCP Server Tools 2.0.0 (PyPi)",
"versions": [
{
"version": "2.0.0-beta.1",
"lessThan": "2.0.0-beta.17",
"versionType": "custom",
"status": "affected"
}
]
} Original source record · Cite this exact observation · Complete original publisher JSON
euvd · EUVD-2026-10689 Published EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON.
Original publisher date fields datePublished: Mar 10, 2026, 5:05:21 PM
dateUpdated: Jun 19, 2026, 6:18:08 PM
3 related source bulletins · separate from aliases msrc_CVE-2026-26118: Azure MCP Server Tools Elevation of Privilege Vulnerability
CVE-2026-26118
WID-SEC-W-2026-0655: Microsoft Azure Komponenten: Mehrere Schwachstellen
CVE-2026-23651 · CVE-2026-23660 · CVE-2026-23661 · CVE-2026-23662 · CVE-2026-23664 · CVE-2026-23665 · CVE-2026-26117 · CVE-2026-26118 · CVE-2026-26121 · CVE-2026-26122 · CVE-2026-26124 · CVE-2026-26141 · CVE-2026-26148
NCSC-2026-0082: Kwetsbaarheden verholpen in Microsoft Azure
CVE-2026-23651 · CVE-2026-23660 · CVE-2026-23661 · CVE-2026-23662 · CVE-2026-23664 · CVE-2026-23665 · CVE-2026-26117 · CVE-2026-26118 · CVE-2026-26121 · CVE-2026-26122 · CVE-2026-26124 · CVE-2026-26141 · CVE-2026-26148
No normalized affected-package data is projected for this source revision. The original publisher record may contain additional product and version evidence; this does not establish that a package is unaffected.
Original source record · Cite this exact observation · Complete original publisher JSON
nvd · CVE-2026-26118 Published NVD analysis and CPE criteria are source context, not proof that a package or your environment is affected. Complete affected data, logical configurations and SSVC are retained in the original JSON.
Source analysis status: Analyzed
Weakness classifications: CWE-918
Original publisher date fields published: 2026-03-10T18:18:41.180
lastModified: 2026-06-17T10:25:45.377
17 source CPE criteria · context only cpe:2.3:a:microsoft:azure_mcp_server:*:*:*:*:*:*:*:* cpe:2.3:a:microsoft:azure_mcp_server:2.0.0:beta1:*:*:*:*:*:* cpe:2.3:a:microsoft:azure_mcp_server:2.0.0:beta10:*:*:*:*:*:* cpe:2.3:a:microsoft:azure_mcp_server:2.0.0:beta11:*:*:*:*:*:* cpe:2.3:a:microsoft:azure_mcp_server:2.0.0:beta12:*:*:*:*:*:* cpe:2.3:a:microsoft:azure_mcp_server:2.0.0:beta13:*:*:*:*:*:* cpe:2.3:a:microsoft:azure_mcp_server:2.0.0:beta14:*:*:*:*:*:* cpe:2.3:a:microsoft:azure_mcp_server:2.0.0:beta15:*:*:*:*:*:* cpe:2.3:a:microsoft:azure_mcp_server:2.0.0:beta16:*:*:*:*:*:* cpe:2.3:a:microsoft:azure_mcp_server:2.0.0:beta2:*:*:*:*:*:* cpe:2.3:a:microsoft:azure_mcp_server:2.0.0:beta3:*:*:*:*:*:* cpe:2.3:a:microsoft:azure_mcp_server:2.0.0:beta4:*:*:*:*:*:* cpe:2.3:a:microsoft:azure_mcp_server:2.0.0:beta5:*:*:*:*:*:* cpe:2.3:a:microsoft:azure_mcp_server:2.0.0:beta6:*:*:*:*:*:* cpe:2.3:a:microsoft:azure_mcp_server:2.0.0:beta7:*:*:*:*:*:* cpe:2.3:a:microsoft:azure_mcp_server:2.0.0:beta8:*:*:*:*:*:* cpe:2.3:a:microsoft:azure_mcp_server:2.0.0:beta9:*:*:*:*:*:* The original JSON retains the logical configuration operators, exclusions and version bounds.
No normalized affected-package data is projected for this source revision. The original publisher record may contain additional product and version evidence; this does not establish that a package is unaffected.
Original source record · Cite this exact observation · Complete original publisher JSON
osv · GHSA-hhfx-wfvq-7g9c Published Azure.Mcp NuGet
ECOSYSTEM · introduced 2.0.0-beta.1 → fixed 2.0.0-beta.17
Azure.Mcp NuGet
ECOSYSTEM · introduced 1.0.0 → fixed 1.0.2
2 versions listed as affected 1.0.0, 1.0.1
@azure/mcp npm
SEMVER · introduced 2.0.0-beta.1 → fixed 2.0.0-beta.17
msmcp-azure PyPI
ECOSYSTEM · introduced 2.0.0b14 → fixed 2.0.0b17
@azure/mcp npm
SEMVER · introduced 1.0.0 → fixed 1.0.2
Original source record · Cite this exact observation · Complete original publisher JSON