You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
azure connected machine
About this tag
The Azure Connected Machine tag covers discussions about the Azure Arc agent, which runs on Windows and Linux machines to enable cloud management, extensions, and hybrid capabilities. Recent content focuses on CVE-2025-49692, an elevation of privilege vulnerability in the Azure Connected Machine Agent. This improper access control flaw could allow an authorized local attacker to gain elevated privileges on an affected host. The tag includes security advisories, patching guidance, and defensive measures for Azure Arc-connected servers. Topics also touch on the agent's role in hybrid cloud environments and its integration with Windows and Linux systems.
CVE-2025-49692 Azure Connected Machine Agent Elevation of Privilege Vulnerability
Overview
What happened: Microsoft has posted an advisory for CVE‑2025‑49692 describing an improper access control vulnerability in the Azure Connected Machine (Windows Virtual Machine) Agent that can allow an...