Known vulnerabilities in Microsoft Azure ARC

Is your version affected?

CVE	Summary	Score	Published
CVE-2026-69399	Unintended proxy or intermediary in Azure Arc allows an authorized attacker to elevate privileges over a network	9.9 Critical	Sep 17, 2026
CVE-2026-70009	Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Arc allows an unauthorized…	9.3 Critical	Sep 17, 2026
CVE-2026-69555	Incorrect authorization in Azure Arc allows an unauthorized attacker to elevate privileges over a network	10.0 Critical	Aug 20, 2026
CVE-2026-24302	Improper access control in Azure Arc allows an unauthorized attacker to elevate privileges over a network	8.6 High	Feb 5, 2026
CVE-2025-26627	Improper neutralization of special elements used in a command ('command injection') in Azure Arc allows an authorized…	7.0 High	Mar 11, 2025
CVE-2022-38007	Azure Guest Configuration and Azure Arc-enabled servers Elevation of Privilege Vulnerability	7.8 High	Sep 13, 2022