CVE-2026-32168

published 2026-04-14

CVE-2026-32168: Improper input validation in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.

high 7.8 CVSS 3.1

AV L AC L PR L UI N S U C H I H A H

Improper input validation in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
microsoft	azure_monitor	>= 1.0.0 < 1.35.9	1.35.9
microsoft	azure_monitor_agent	< 1.35.9	1.35.9

CWE-20