Code Injection Vulnerability in Azure Monitor Agent by Microsoft
CVE-2025-47988
7.5HIGH
What is CVE-2025-47988?
A vulnerability in Azure Monitor Agent allows unauthorized attackers to exploit improper control in code generation, facilitating the execution of arbitrary code across adjacent networks. This poses significant risks to system integrity and data security, as it can enable malicious actors to compromise affected systems without proper authentication.
Affected Version(s)
Azure Monitor Unknown 1.0.0 < 1.35.1