← All advisories

Unrated severityNVD Advisory· Published Oct 14, 2025· Updated Feb 26, 2026

Arc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege Vulnerability

CVE-2025-47989

Description

Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.

Affected products

2

Azure/Azure Connected Machine Agentllm-fuzzy
Microsoft/Arc Enabled Servers - Azure Connected Machine Agentv5
Range: 1.0.0

Patches

Vulnerability mechanics

References

1

msrc.microsoft.com/update-guide/vulnerability/CVE-2025-47989mitrevendor-advisorypatch

News mentions

0

No linked articles in our index yet.

CVE-2025-47989 · VYPR