CVE-2026-42830 Untrusted search path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally

Description

Untrusted search path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.

Affected products and versions

Product	Affected versions	Fixed in
Azure Monitor Agent Metrics Extension 1.0	1.0.0 → < 1.42.0	1.42.0

Other CVEs of Azure Monitor Agent Metrics Extension

The 2 CVEs of Azure Monitor Agent Metrics Extension →

CVE-2026-47632 Improper certificate validation in Azure Connected Machine Agent allows an unauthorized attacker to elevate privileges… 8.8 High