Microsoft Azure Monitor Agent Privilege Escalation Vulnerability

A vulnerability allowing deserialization of untrusted data in Azure Monitor Agent has been identified. This issue enables an authorized attacker to locally elevate privileges. Successful exploitation could grant SYSTEM privileges to the attacker.

Impact

Exploitation of this vulnerability allows for unauthorized privilege escalation, with attackers gaining SYSTEM privileges.

Remediation

Users are advised to download the security update for Azure Monitor Agent. Instructions for managing the agent can be found in the Azure Monitor Agent Release Notes.