Microsoft Azure Monitor Agent Privilege Escalation Vulnerability

A vulnerability allowing improper access control in Azure Monitor Agent has been identified, which could enable an authorized attacker to locally elevate privileges. This issue affects all versions of Azure Monitor Agent prior to the security update released on October 14, 2025.

Impact

Exploitation of this vulnerability allows a regular user on an Arc-enabled virtual machine to read any file on the system with NT SYSTEM privileges.

Remediation

Users can download the security update for Azure Monitor Agent from the Microsoft Learn website. For more information on managing the Azure Monitor Agent, refer to the release notes available on the same site.