CVE-2025-53767
Published: 07 August 2025
Summary
CVE-2025-53767 is a critical-severity SSRF (CWE-918) vulnerability in Microsoft Azure Openai. Its CVSS base score is 10.0 (Critical).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Privilege Escalation (T1068); ranked in the top 35.5% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
This vulnerability is AI-related — categorised as APIs and Models; in the Other ATLAS/OWASP Terms risk domain.
The strongest mitigations our analysis identified are NIST 800-53 AC-4 (Information Flow Enforcement) and SC-7 (Boundary Protection).
Threat & Defense at a Glance
Threat & Defense Details
Mitigating Controls (NIST 800-53 r5)AI
Validates information inputs to prevent SSRF exploitation by rejecting malformed or unauthorized URLs that could trigger unauthorized server-side requests leading to privilege escalation.
Enforces information flow control policies to block unauthorized outbound requests from the Azure OpenAI service initiated via SSRF.
Monitors and controls communications at system boundaries to restrict SSRF attempts that could enable privilege escalation within the Azure OpenAI environment.
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
CVE-2025-53767 is an Elevation of Privilege vulnerability in Azure OpenAI, enabling exploitation for privilege escalation (T1068).
NVD Description
Azure OpenAI Elevation of Privilege Vulnerability
Deeper analysisAI
CVE-2025-53767 is an elevation of privilege vulnerability affecting Azure OpenAI. Published on 2025-08-07, it has a CVSS v3.1 base score of 10.0 (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N), marking it as critical severity. The issue maps to CWE-918, server-side request forgery.
Attackers with network access can exploit this vulnerability without requiring privileges, user interaction, or high complexity. Exploitation enables high confidentiality and integrity impacts, with a scope change, potentially allowing privilege escalation within the Azure OpenAI environment.
Microsoft's update guide provides details on the vulnerability at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53767.
Details
- CWE(s)
Affected Products
AI Security AnalysisAI
- AI Category
- APIs and Models
- Risk Domain
- Other ATLAS/OWASP Terms
- OWASP Top 10 for LLMs 2025
- None mapped
- Classification Reason
- Azure OpenAI is a cloud-based service that provides APIs for accessing and utilizing AI models, particularly large language models from OpenAI, making 'APIs and Models' the primary affected category.