high7.8
CVE-2025-49692
Improper access control in Azure Windows Virtual Machine Agent allows an authorized attacker to elevate privileges locally.
Impact
Improper access control in Azure Windows Virtual Machine Agent allows an authorized attacker to elevate privileges locally.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Azure Connected Machine Agent | before 1.49 |