CVE-2026-32204
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk22th percentile - higher than 22% of all known CVEs
Summary
The Azure Monitor Agent has a vulnerability related to external control of file name or path, allowing an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with appropriate permissions may gain higher privileges on the system, potentially leading to serious security breaches.
Recommendation
It is recommended to monitor and restrict access to the Azure Monitor Agent and regularly update the software to patch this vulnerability.
Other vulnerabilities in Azure Monitor Agent
See all- CVE-2026-32192High
Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.
- CVE-2026-32168High
Improper input validation in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.
- CVE-2026-47299High
Improper neutralization of special elements used in a command (command injection) in Azure Monitor Agent allows an authorized attacker to elevate privileges over a network.
- CVE-2024-35254High
A vulnerability in the Azure Monitor Agent allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.
Original NVD description (English source)
External control of file name or path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.