Azure Guest Configuration and Azure Arc-enabled servers Elevation of Privilege Vulnerability

What privileges could be gained by an attacker who successfully exploited the vulnerability?
An attacker who successfully exploited the vulnerability could replace Microsoft-shipped code with their own code, which would then be run as root in the context of a Guest Configuration daemon. On an Azure VM with the Guest Configuration Linux Extension installed, this would run in the context of the GC Policy Agent daemon. On an Azure Arc-enabled server, it could run in the context of the GC Arc Service or Extension Service daemons.

Security updates
V1.21 — https://docs.microsoft.com/en-us/azure/virtual-machines/automatic-extension-upgrade
1.22 — https://docs.microsoft.com/en-us/azure/azure-arc/servers/agent-release-notes