CVE-2026-32211: What the Azure MCP Server Flaw Means for Your Agent Security

On April 3, 2026, Microsoft disclosed CVE-2026-32211, a critical authentication flaw in the Azure MCP Server. CVSS score: 9.1. The vulnerability allows unauthorized access to sensitive data because the server is missing authentication mechanisms entirely. No patch is available yet. Microsoft has published mitigation guidance but the fix is pending. If your AI agents use Azure DevOps through MCP, this applies to you. What the vulnerability is The Azure MCP Server (@azure-devops/mcp on npm) exposes tools for interacting with Azure DevOps: work items, repos, pipelines, pull requests. CVE-2026-32211 is an information disclosure flaw where the server lacks proper authentication, allowing an attacker to access sensitive data without valid credentials. That could include configuration details, API keys, authentication tokens, and project data. This is not a subtle bug. It is a missing authentication layer on a server that handles enterprise development infrastructure. What our monitoring alre