7.8
High
CVE-2026-32204 External control of file name or path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally
Description
External control of file name or path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Azure Monitor 1.0 | 1.0.0 → < 1.14.0 | 1.14.0 |
References
- Azure Monitor Agent Elevation of Privilege Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Azure Monitor
The 13 CVEs of Azure Monitor →
CVE-2026-32192
Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally
7.8
High
CVE-2026-32168
Improper input validation in Azure Monitor Agent allows an authorized attacker to elevate privileges locally
7.8
High
CVE-2025-62550
Out-of-bounds write in Azure Monitor Agent allows an authorized attacker to execute code over a network
8.8
High
CVE-2025-59504
Heap-based buffer overflow in Azure Monitor Agent allows an unauthorized attacker to execute code locally
7.3
High