Hackers Exploit Agent ID Administrator Role to Hijack Service Principals

A critical scoping vulnerability in Microsoft Entra ID’s Agent Identity Platform allowed accounts with only the Agent ID Administrator role to take ownership of arbitrary service principals, create new credentials, and authenticate as those principals — effectively enabling severe privilege escalation across tenants. SilverFort researchers disclosed the flaw, Microsoft patched it by April 9, 2026, and organizations are advised to monitor role usage, audit privileged service principals, and alert on unexpected ownership or credential changes.