high7.0
CVE-2025-47989
Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.
Impact
Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Azure Connected Machine Agent | before 1.57 |