CVE-2026-40381
published 2026-05-12CVE-2026-40381: Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.
high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | azure_connected_machine_agent | < 1.63 | 1.63 |
| microsoft | azure_connected_machine_agent | >= 1.0.0 < 1.63 | 1.63 |