Security Updates for Azure Connected Machine Agent < 1.68 (October 2026)

The Microsoft Azure Connected Machine Agent installation on the remote host is missing security updates. It is, therefore, affected by an elevation of privilege vulnerability: - Server-side request forgery ssrf in Azure Arc allows an authorized attacker to elevate privileges over a network...

CVE-2026-96204

Server-side request forgery ssrf in Azure Arc allows an authorized attacker to elevate privileges over a network...

CVE-2026-96204

A Server-side request forgery (SSRF) vulnerability exists in Azure Arc . This flaw allows an authorized attacker to achieve privilege escalation over a network. The vulnerability is associated with CWE-918 . Microsoft has provided updates to address this issue, and users are encouraged to install...

EUVD-2026-99743

Server-side request forgery ssrf in Azure Arc allows an authorized attacker to elevate privileges over a network...

Azure Arc Elevation of Privilege Vulnerability

Server-side request forgery ssrf in Azure Arc allows an authorized attacker to elevate privileges over a network...

CVE-2026-96204: Server-Side Request Forgery (SSRF)

Server-side request forgery ssrf in Azure Arc allows an authorized attacker to elevate privileges over a network...

PT-2026-113030

Name of the Vulnerable Software and Affected Versions Azure Arc affected versions not specified Description A server-side request forgery SSRF issue in the Azure Connected Machine Agent allows an authorized attacker to perform a local Instance Metadata Service IMDS SSRF. This can be used to hijac...

KLA91335 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability i...

Azure Arc Authentication Privilege Escalation

The vulnerability of the Azure Arc local infrastructure connection software relates to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to gain increased privileges remotely...

Azure Arc Name Reference Privilege Escalation

The vulnerability of the Azure Arc local infrastructure connection software relates to the use of a name with an incorrect reference. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

EUVD-2026-82583

Improper limitation of a pathname to a restricted directory 'path traversal' in Azure Arc allows an unauthorized attacker to elevate privileges over a network...

EUVD-2026-82586

Azure Arc Elevation of Privilege Vulnerability...

CVE-2026-70009

Improper limitation of a pathname to a restricted directory 'path traversal' in Azure Arc allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-69399

Azure Arc Elevation of Privilege Vulnerability...

CVE-2026-69399

Azure Arc is affected by an Elevation of Privilege vulnerability (CVE-2026-69399) rated CRITICAL with a CVSS 3.1 score of 10.0 . The attack vector is network-based , requires no privileges and no user interaction , and has changed scope with high impact on confidentiality, integrity, and availabi...

CVE-2026-70009

Azure Arc is affected by a path traversal vulnerability caused by improper limitation of a pathname to a restricted directory. An unauthenticated attacker can exploit this over the network to elevate privileges , achieving high integrity impact with low confidentiality impact and no availability ...

Azure Arc Elevation of Privilege Vulnerability

Improper limitation of a pathname to a restricted directory 'path traversal' in Azure Arc allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-70009: Improper Limitation of a Pathname to a Restricted Directory

Improper limitation of a pathname to a restricted directory 'path traversal' in Azure Arc allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-69399: Unintended Proxy or Intermediary

Azure Arc Elevation of Privilege Vulnerability...

PT-2026-95169

Name of the Vulnerable Software and Affected Versions Azure Arc affected versions not specified Description An issue exists where improper limitation of a pathname to a restricted directory, known as path traversal, allows an unauthorized attacker to elevate privileges over a network. Path...