CVE-2026-47632 Azure Connected Machine Agent Elevation of Privilege Vulnerability

...

Azure Connected Machine Agent Elevation of Privilege Vulnerability

Improper certificate validation in Azure Connected Machine Agent allows an unauthorized attacker to elevate privileges over an adjacent network...

The vulnerability of the Azure Monitor Agent Metrics Extension lies in its use of an insecure search path, allowing attackers to escalate their privileges.

The vulnerability of the Azure Monitor Agent Metrics Extension is related to the use of an unreliable search path. Exploiting this vulnerability can allow attackers to increase their privileges...