CVE-2026-40381
HighSummary
Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with appropriate permissions may gain elevated privileges, potentially leading to unauthorized access to the system.
Recommendation
It is recommended to review and strengthen access control mechanisms in Azure Connected Machine Agent.
Other vulnerabilities in Azure Connected Machine Agent
See all- CVE-2026-21224High
Stack-based buffer overflow in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.
- CVE-2026-47632High
Improper certificate validation in Azure Connected Machine Agent allows an unauthorized attacker to elevate privileges over an adjacent network.
- CVE-2025-58724High
Azure Connected Machine Agent has an improper access control vulnerability that allows an authorized attacker to elevate privileges locally.
- CVE-2025-47989High
Azure Connected Machine Agent has an improper access control vulnerability that allows an authorized attacker to elevate privileges locally.
- CVE-2024-21329High
Vulnerability in Azure Connected Machine Agent allows elevation of privilege. An attacker could exploit it to gain higher privileges on the system.
Original NVD description (English source)
Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS