Microsoft Azure Monitor Agent Privilege Escalation Vulnerability

A vulnerability allowing improper input validation in Azure Monitor Agent could enable an authorized attacker to locally elevate privileges. This issue arises because the agent processes certain configuration files with root-level permissions, without adequately validating their contents. As a result, a malicious modification could lead to the execution of unintended commands with elevated privileges, potentially granting root access on the affected virtual machine.

Impact

Exploitation of this vulnerability could allow an attacker to gain root privileges on an affected Azure Linux Virtual Machine.

Remediation

Users are advised to download the security update for Azure Monitor Agent. Instructions for managing the agent can be found in the Azure Monitor Agent Release Notes.