CVE-2026-40381
HighSummary
Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with appropriate permissions may gain elevated privileges, potentially leading to unauthorized access to the system.
Recommendation
It is recommended to review and strengthen access control mechanisms in Azure Connected Machine Agent.
Other vulnerabilities in Azure Connected Machine Agent
See all- CVE-2026-21224High
Stack-based buffer overflow in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.
- CVE-2026-47632High
Improper certificate validation in Azure Connected Machine Agent allows an unauthorized attacker to elevate privileges over an adjacent network.
- CVE-2024-21329High
Vulnerability in Azure Connected Machine Agent allows elevation of privilege. An attacker could exploit it to gain higher privileges on the system.
Original NVD description (English source)
Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.