CVE-2026-47299
HighCVSS 7.2Exploitation Probability (EPSS)
Elevated risk58th percentile - higher than 58% of all known CVEs
Summary
Improper neutralization of special elements used in a command (command injection) in Azure Monitor Agent allows an authorized attacker to elevate privileges over a network.
Risk Assessment
Risk of privilege escalation by an authorized user, potentially leading to unauthorized access to resources.
Recommendation
Apply security updates from the vendor and monitor user privileges.
Other vulnerabilities in Azure Monitor Agent
See all- CVE-2026-32192High
Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.
- CVE-2026-32168High
Improper input validation in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.
- CVE-2026-32204High
The Azure Monitor Agent has a vulnerability related to external control of file name or path, allowing an authorized attacker to elevate privileges locally.
- CVE-2025-59494High
Improper access control in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.
- CVE-2025-59285High
A deserialization of untrusted data vulnerability in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.
- CVE-2024-35254High
A vulnerability in the Azure Monitor Agent allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.
Original NVD description (English source)
Improper neutralization of special elements used in a command ('command injection') in Azure Monitor Agent allows an authorized attacker to elevate privileges over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS