Privilege Escalation Vulnerability in Grafana Alloy
CVE-2024-8975
7.8HIGH
Key Information:
What is CVE-2024-8975?
An unquoted search path vulnerability present in Grafana Alloy on Windows systems can enable a local user to escalate their privileges to that of the SYSTEM account. This issue affects Alloy versions prior to 1.3.3 and those from 1.4.0-rc.0 to 1.4.0-rc.1, exposing these versions to potential exploitation when proper path handling is not observed.
Affected Version(s)
Alloy Windows 0 < 1.3.3
Alloy Windows 1.4.0-rc.0 <= 1.4.0-rc.1