--- title: Azure SRE Agent flaw lets outsiders silently eavesdrop... description: A critical authentication flaw (CVE-2026-32173, CVSS 8.6) in Microsoft's Azure SRE Agent allowed any valid Entra ID account from any tenant to silently... canonical: https://daily.dev/posts/azure-sre-agent-flaw-lets-outsiders-silently-eavesdrop-on-enterprise-cloud-operations-8rbfon0di twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Azure SRE Agent flaw lets outsiders silently eavesdrop on enterprise cloud operations | daily.dev og:description: A critical authentication flaw (CVE-2026-32173, CVSS 8.6) in Microsoft's Azure SRE Agent allowed any valid Entra ID account from any tenant to silently... og:url: https://daily.dev/posts/azure-sre-agent-flaw-lets-outsiders-silently-eavesdrop-on-enterprise-cloud-operations-8rbfon0di og:image: https://api.daily.dev/og/posts/8rBFon0DI.png og:image:alt: Azure SRE Agent flaw lets outsiders silently eavesdrop on enterprise cloud operations og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Azure SRE Agent flaw lets outsiders silently eavesdrop on enterprise cloud operations **[CSO Online](https://daily.dev/sources/csoonline)** · 5 min read · 1 upvotes · 0 comments ## Summary A critical authentication flaw (CVE-2026-32173, CVSS 8.6) in Microsoft's Azure SRE Agent allowed any valid Entra ID account from any tenant to silently eavesdrop on live agent activity streams. The vulnerability stemmed from a multi-tenant app registration misconfiguration on the /agentHub WebSocket endpoint, which validated tokens but never verified tenant membership or authorization. Once connected, attackers received all broadcasted events including user prompts, internal reasoning traces, executed commands with full arguments, and credentials — with no trace left on the victim's side. Exploitation required only the target's predictable subdomain and ~15 lines of Python. Microsoft has patched the issue server-side with no customer action required, but organizations that used the agent during preview should treat that period as potentially compromised and rotate any credentials that passed through agent conversations. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Microsoft Patches Critical Entra ID Flaw Enabling Global Admin Impersonation Across Tenants](https://daily.dev/posts/microsoft-patches-critical-entra-id-flaw-enabling-global-admin-impersonation-across-tenants-689ayyyo7) · The Hacker News · 1 upvotes · 0 comments - [Microsoft patched an ‘agent-only’ role that was not](https://daily.dev/posts/microsoft-patched-an-agent-only-role-that-was-not-ujq3tboi9) · CSO Online · 0 upvotes · 0 comments --- Tags: [#ai-agents](https://daily.dev/tags/ai-agents), [#azure](https://daily.dev/tags/azure), [#authentication](https://daily.dev/tags/authentication) [View this post on daily.dev](https://daily.dev/posts/azure-sre-agent-flaw-lets-outsiders-silently-eavesdrop-on-enterprise-cloud-operations-8rbfon0di) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Azure SRE Agent flaw lets outsiders silently eavesdrop on enterprise cloud operations","url":"https://daily.dev/posts/azure-sre-agent-flaw-lets-outsiders-silently-eavesdrop-on-enterprise-cloud-operations-8rbfon0di","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/azure-sre-agent-flaw-lets-outsiders-silently-eavesdrop-on-enterprise-cloud-operations-8rbfon0di"},"datePublished":"2026-04-21T12:38:22.939Z","dateModified":"2026-08-24T07:02:11.418Z","description":"A critical authentication flaw (CVE-2026-32173, CVSS 8.6) in Microsoft's Azure SRE Agent allowed any valid Entra ID account from any tenant to silently...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/c9c84ab70b5dec7456fba5fae2fb989e?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/c9c84ab70b5dec7456fba5fae2fb989e?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"CSO Online","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"CSO Online","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/98667e4b5cac46cf9c470819c6cf71cd","url":"https://daily.dev/sources/csoonline"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/azure-sre-agent-flaw-lets-outsiders-silently-eavesdrop-on-enterprise-cloud-operations-8rbfon0di","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"ai-agents,azure,authentication","timeRequired":"PT5M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"CSO Online","item":"https://daily.dev/sources/csoonline"},{"@type":"ListItem","position":3,"name":"Azure SRE Agent flaw lets outsiders silently eavesdrop on enterprise cloud operations"}]} ```