A high‑impact, local elevation‑of‑privilege issue has been reported in Microsoft’s Azure agent ecosystem that can let a low‑privileged local actor escalate to SYSTEM/root on affected hosts and potentially abuse machine‑assigned identities and extension management functionality — but the numeric...
CVE-2025-49692 Azure Connected Machine Agent Elevation of Privilege Vulnerability
Overview
What happened: Microsoft has posted an advisory for CVE‑2025‑49692 describing an improper access control vulnerability in the Azure Connected Machine (Windows Virtual Machine) Agent that can allow an...