Azure OpenAI SSRF -> privilege escalation
Date: 2025-07
Affected: Azure OpenAI Service
Attack vector: ssrf
Category: real-world
Severity: Critical
CVE: CVE-2025-53767
CWE: CWE-918
CVSS: 8.6 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N)

SSRF in Azure OpenAI integration enabling attackers to access internal endpoints and escalate privileges within the Azure tenant.


Mitigations:

Architectural layers (MAESTRO):