Elevation of Privilege Vulnerability in Azure Connected Machine Agent by Microsoft

CVE-2025-58724

What is CVE-2025-58724?

The Azure Connected Machine Agent is vulnerable due to improper access control, enabling authorized attackers to locally elevate privileges. This flaw can allow threat actors to gain unauthorized access to system functions, potentially leading to further exploitation within the environment. It is crucial for users of the Azure Connected Machine Agent to apply the necessary updates and monitor for any signs of exploitation.

References