Skip to content
OpenAdvisories
High MSRC-CVE-2026-47632 1 CVE

Azure Connected Machine Agent Elevation of Privilege Vulnerability

Published Jul 14, 2026 · Updated Aug 18, 2026 · Revision 2

Vendor: Microsoft

Summary

Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

What privileges could be gained by an attacker who successfully exploited this vulnerability?
An attacker who successfully exploited this vulnerability could gain ELEVATED privileges, which may allow them to perform actions beyond their original permissions.

Security updates
1.65 — https://learn.microsoft.com/en-us/azure/azure-arc/servers/agent-release-notes

Vulnerabilities 1

  • High 8.8
    CVE-2026-47632

    Azure Connected Machine Agent Elevation of Privilege Vulnerability

    Improper certificate validation in Azure Connected Machine Agent allows an unauthorized attacker to elevate privileges over an adjacent network.

    Microsoft Azure Connected Machine Agent

Revision history

  1. #2

    Corrected the affected product from **Azure Monitor Agent Metrics Extension** to **Azure Connected Machine Agent** and updated the Security Updates table. This is an informational change only.

  2. #1

    Information published.

References