Missing authorization in Azure Machine Learning allows an authorized attacker to elevate

链接： https://github.com/advisories/GHSA-8mh7-q3x4-gpff

CVSS 评分： 10.0

参考链接：

• https://nvd.nist.gov/vuln/detail/CVE-2025-49747

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49747

• https://github.com/advisories/GHSA-8mh7-q3x4-gpff

描述：

Missing authorization in Azure Machine Learning allows an authorized attacker to elevate privileges over a network.