Microsoft Patches Entra ID Role Flaw That Enabled Service Principal Takeover
Agent ID Administrator enabled service principal takeover before April 9, 2026 patch, exposing privilege escalation risk in Entra ID tenants.
More info