Product:
Azure Monitor Agent
Summary
External control of file name or path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally. This vulnerability can lead to significant security risks if exploited. Attackers with local access can manipulate file paths to gain higher privileges.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2026-32204 |
Exploitation
To exploit this vulnerability, an attacker must have local access to the system running Azure Monitor Agent. By controlling the file name or path, the attacker can execute malicious code with elevated privileges, potentially compromising the entire system.
Affected Products
- Azure Monitor Agent: Vulnerable to local privilege escalation due to external control of file names or paths.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Microsoft. Additionally, restricting local access to systems running Azure Monitor Agent can help reduce the risk of exploitation.