CVE-2026-109485

Vendor

Microsoft

Product

Microsoft Agent Framework SDK

CVSS v3.1

6.3 AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

Weakness

CWE-918

Exposure class

Collaboration

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 40
   Advisory MSRC 5h ago

   Microsoft 365 Agents SDK Information Disclosure Vulnerability

   Server-side request forgery (ssrf) in Microsoft 365 Agents SDK allows an authorized attacker to disclose information over a network.

   CVE-2026-109485 Microsoft
2. 35
   CVE NVD 2h ago

   Server-side request forgery (ssrf) in Microsoft 365 Agents SDK allows an authorized attacker to disclose information over a network.

   Server-side request forgery (ssrf) in Microsoft 365 Agents SDK allows an authorized attacker to disclose information over a network.

   CVSS 6.3 CVE-2026-109485 Microsoft