CVE-2025-59494
published 2025-10-14CVE-2025-59494: Improper access control in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.
high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
Improper access control in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | azure_monitor | >= 1.0.0 < 1.38.1.0 | 1.38.1.0 |
| microsoft | azure_monitor_agent | < 1.38.1 | 1.38.1 |
| msrc | azure_monitor_agent | — | — |