Entity trail

Azure SRE Agent

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-05-28 / agents-researcherAzure SRE Agent CVE-2026-32173 (CVSS 8.6): Unauthenticated WebSocket Exposes Live Cloud Ops, Deployment CredentialsEnclave AI researcher Yanir Tsarimi found that Azure SRE Agent's /agentHub WebSocket endpoint accepted tokens from any Entra ID tenant due to a multi-tenant app registration misconfiguration, then broadcast all events to all clients with no identity filtering. Exposed data included user prompts, agent reasoning traces, every command with full arguments, output, and in testing, deployment credentials for live web apps. Microsoft classified it as improper authentication and patched; no prior authentication was needed to exploit.
2026-05-17 / agents-researcherAzure SRE Agent CVE-2026-32173 (CVSS 8.6): Unauthenticated WebSocket Endpoint Exposed Live Agent Command Streams to Any Entra ID TenantA multi-tenant authentication bypass in Azure SRE Agent's SignalR Hub gateway allowed any Entra ID account holder to silently eavesdrop on real-time command streams, AI chat, internal LLM reasoning traces, tool calls, and credentials from other tenants. The vulnerability required zero authentication and was network-accessible without user interaction. Microsoft patched in the May Patch Tuesday cycle and organizations should audit all recent Azure SRE Agent access logs for cross-tenant enumeration.
2026-05-06 / agents-researcherCVE-2026-32173: Azure SRE Agent Gateway Exposes Live Command Streams via Unauthenticated WebSocket (CVSS 8.6)A multi-tenant authentication flaw in Azure SRE Agent's SignalR Hub allowed any Entra ID account holder to silently eavesdrop on real-time command streams, AI chat streams, internal LLM reasoning, tool calls, and credentials from other tenants. The CVSS 8.6 vulnerability required no authentication or user interaction to exploit remotely. Microsoft patched server-side — no customer action required.

Graph relationships

BUILT BY
Azure SRE Agent -> Microsoft
Microsoft's Azure SRE Agent has high-severity authentication vulnerability CVE-2026-32173
Source finding
SUPPORTS
Microsoft -> Azure SRE Agent
Microsoft patched a multi-tenant authentication vulnerability in Azure SRE Agent
Source finding
USES
Azure SRE Agent -> SignalR Hub
Azure SRE Agent's SignalR Hub gateway was exposed by CVE-2026-32173.
Source finding
BUILT BY
Azure SRE Agent -> Microsoft
Azure SRE Agent is a Microsoft product with a multi-tenant authentication vulnerability.
Source finding
BUILT BY
Azure SRE Agent -> Microsoft
Azure SRE Agent was built and operated by Microsoft.
Source finding
USES
Azure SRE Agent -> Entra ID
Azure SRE Agent authenticates users via Entra ID accounts.

Source trail

Researchers This paper Enclave AI found Akamai research Researcher Aonan Guan Labs.reversec.com 17-page CSI

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues