Summary
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
Details
What privileges could an attacker gain with successful exploitation?
An attacker who successfully exploited the vulnerability could elevate their privileges to 'root' user.
How could an attacker exploit this vulnerability?
An attacker could send specially crafted configuration messages to a locally running Azure Monitor Agent service that does not strictly validate incoming requests. By doing so, the attacker may be able to write files on the affected system, which could then be used to run unauthorized code.
Security updates
1.14.0 — https://eng.ms/docs/products/geneva/collect/references/amacoreagent/release-notes
Vulnerabilities 1
-
High 7.8
Azure Monitor Agent Elevation of Privilege Vulnerability
External control of file name or path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.
Revision history
-
#1
Information published.
References
-
CVE-2026-32204 Azure Monitor Agent Elevation of Privilege Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32204
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss