CVE-2026-47632 Azure Connected Machine Agent Elevation of Privilege Vulnerability

...

Azure Connected Machine Agent Elevation of Privilege Vulnerability

Improper certificate validation in Azure Connected Machine Agent allows an unauthorized attacker to elevate privileges over an adjacent network...

The vulnerability of the Azure Monitor Agent Metrics Extension lies in its use of an insecure search path, allowing attackers to escalate their privileges.

The vulnerability of the Azure Monitor Agent Metrics Extension is related to the use of an unreliable search path. Exploiting this vulnerability can allow attackers to increase their privileges...

CVE-2026-42830

The CVE-2026-42830 entry concerns the Azure Monitor Agent Metrics Extension, where an untrusted search path leads to local privilege elevation for an authorized attacker. Reported impact is Privilege Escalation with High integrity impact, from the Azure Monitor Agent; CVSS 3.1 base score 6.5 (Loc...