[REVISION HISTORY]
Microsoft Titan platform security vulnerability
Updated 1 time since CLSTR started tracking revisions of this situation.
What changed
2026-09-30 06:55 UTC → 2026-10-03 22:34 UTC ·
added
removed
A 16-year-old security researcher, known as Faav, discovered a vulnerability in Microsoft’s internal Titan analytics platform using an AI-based orchestration tool called Antares. The flaw involved the platform’s failure to properly validate cryptographic signatures on JSON Web Tokens (JWT), which allowed for unauthorized access to a public API via a virtual private network (VPN). By exploiting an unsigned authentication token and using the username ‘admin’, the researcher was able to execute SQL queries with administrative privileges. While the vulnerability theoretically provided access to databases containing approximately 17.3 trillion rows of data and 25,000 employee accounts, data, the researcher reported that no customer data was stolen or downloaded. The activity was limited to analyzing exposure included metadata from approximately 25,000 accounts, 17,990 employee emails, and small samples 24,569 internal dashboards. Faav reported the finding to demonstrate the security risk. Microsoft has since patched Security Response Center on September 5. Microsoft closed the exposure access point on September 9 and subsequently rewarded the researcher with a $5,000 bug bounty. bounty on September 17.
Versions
- 2026-10-03 22:34 UTC Microsoft Titan platform security vulnerability
- 2026-09-30 06:55 UTC Microsoft Titan platform security vulnerability
Only revisions since CLSTR began indexing content versions appear here. Select a version to see what changed compared to the one before it.