Microsoft Azure Databricks Server-Side Request Forgery Vulnerability Allowing Privilege Elevation

Vulnerability

A server-side request forgery (SSRF) vulnerability has been identified in Microsoft Azure Databricks. This vulnerability allows an unauthorized attacker to elevate privileges over a network. It affects several different versions and ranges of Azure Databricks.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege elevation within the Azure Databricks environment.

Added: Apr 3, 2026, 12:18 AM
Updated: Apr 3, 2026, 12:18 AM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
0.6
exploitability
6.8
remediation
0.0
relevance
5.2
threat
0.0
urgency
2.9
incentive
4.2

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.