CVE-2025-47989 Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally

Description

Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Arc Enabled Servers - Azure Connected Machine Agent 1.0	1.0.0 → < 1.57	1.57

Autres CVE de Arc Enabled Servers - Azure Connected Machine Agent

Les 4 CVE de Arc Enabled Servers - Azure Connected Machine Agent →

CVE-2026-96204 Server-side request forgery (ssrf) in Azure Arc allows an authorized attacker to elevate privileges over a network 6.5 Moyenne CVE-2026-26117 Authentication bypass using an alternate path or channel in Azure Windows Virtual Machine Agent allows an authorized… 7.8 Élevée CVE-2025-58724 Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally 7.8 Élevée