Improper Access Control Vulnerability in Azure Monitor Agent by Microsoft

CVE-2025-59494

What is CVE-2025-59494?

The Azure Monitor Agent is susceptible to an improper access control vulnerability, enabling an authorized attacker to elevate their local privileges. This flaw may allow malicious users to gain unauthorized access to sensitive system functionalities, increasing the risk of further exploitation within the affected environment. Organizations utilizing the Azure Monitor Agent should evaluate their systems to mitigate this security risk.

References