Enclave receives three new Microsoft mobile-authentication credits

MSRC credits Enclave researcher Ofek Levin on three accepted Teams and Authenticator vulnerabilities involving access tokens and credentials.

Bug class: Credential and access-token disclosure, and token-theft privilege escalation
Affected codebase: Microsoft Teams for Android and Microsoft Authenticator
Credited system: Enclave AI
Disclosed: September 8, 2026
Attribution: Self-reported attribution
Severity: high

Source status: MSRC credits Ofek Levin with Enclave on all three CVEs. Microsoft corroborates the vulnerabilities; Enclave's public material supplies the AI-guided workflow mapping.

Summary

The two Teams for Android issues expose credentials or work access tokens. The Authenticator issue can let an attacker steal a token and elevate privileges. Microsoft assigns scores of 6.8, 5.8, and 8.6.

The MSRC strings name Enclave as the reporting organization but do not spell out the AI workflow on these rows. The entry therefore keeps the same self-reported boundary used for other organization-level Enclave credits.

References

Catalogued in the Bugflation public ledger. Disagree with the attribution or severity label? Email the desk.