Skip to content
Threat Feed

Product

Azure Connected Machine Agent

1 brief RSS
high advisory

CVE-2026-40381: Azure Connected Machine Agent Improper Access Control Vulnerability

CVE-2026-40381 is a vulnerability in the Azure Connected Machine Agent that allows an authorized attacker to elevate privileges locally due to improper access control.

Azure Connected Machine Agent privilege-escalation azure access-control
2r 1t 1c