CVE-2025-53767
Published: 07 August 2025
Summary
CVE-2025-53767 is a critical-severity SSRF (CWE-918) vulnerability in Microsoft Azure Openai. Its CVSS base score is 10.0 (Critical).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Privilege Escalation (T1068); ranked in the top 25.3% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
This vulnerability is AI-related — categorised as APIs and Models; in the LLM/Generative AI Risks risk domain.
The strongest mitigations our analysis identified are NIST 800-53 AC-4 (Information Flow Enforcement) and SC-7 (Boundary Protection).
Deeper analysis
CVE-2025-53767 is an elevation of privilege vulnerability affecting Azure OpenAI. Published on 2025-08-07, it has a CVSS v3.1 base score of 10.0 (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N), marking it as critical severity. The issue maps to CWE-918, server-side request forgery.
Attackers with network access can exploit this vulnerability without requiring privileges, user interaction, or high complexity. Exploitation enables high confidentiality and integrity impacts, with a scope change, potentially allowing privilege escalation within the Azure OpenAI environment.
Microsoft's update guide provides details on the vulnerability at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53767.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-23957
Vulnerability details
Azure OpenAI Elevation of Privilege Vulnerability
- CWE(s)
AI Security AnalysisAI
- AI Category
- APIs and Models
- Risk Domain
- LLM/Generative AI Risks
- OWASP Top 10 for LLMs 2025
- None mapped
- Classification Reason
- Matched keywords: openai
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
CVE-2025-53767 is an Elevation of Privilege vulnerability in Azure OpenAI, enabling exploitation for privilege escalation (T1068).
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Validates information inputs to prevent SSRF exploitation by rejecting malformed or unauthorized URLs that could trigger unauthorized server-side requests leading to privilege escalation.
Enforces information flow control policies to block unauthorized outbound requests from the Azure OpenAI service initiated via SSRF.
Monitors and controls communications at system boundaries to restrict SSRF attempts that could enable privilege escalation within the Azure OpenAI environment.