high7.8
CVE-2025-55316
External control of file name or path in Azure Arc allows an authorized attacker to elevate privileges locally.
Impact
External control of file name or path in Azure Arc allows an authorized attacker to elevate privileges locally.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Azure Connected Machine Agent | before 1.56 |