Product:
Azure Arc
Summary
Azure Arc has a vulnerability that allows for elevation of privilege. This issue could allow an attacker to gain higher privileges than intended. The vulnerability is classified as having a high severity due to its potential impact on confidentiality.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.6 | CVE-2026-24302 |
Exploitation
To exploit this vulnerability, an attacker would need to have access to the network where Azure Arc is deployed. By leveraging the low attack complexity, the attacker can execute malicious actions that lead to privilege escalation without requiring user interaction or special privileges.
Affected Products
- Azure Arc: A service that extends Azure management to any infrastructure.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Microsoft. Regularly monitoring and auditing Azure Arc configurations can also help in identifying and addressing potential security risks.