Microsoft: >> Azure Arc Security Vulnerabilities
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Arc allows an unauthorized attacker to elevate privileges over a network.
CVSS Score
9.3
EPSS Score
0.005
Published
2026-09-17
Unintended proxy or intermediary in Azure Arc allows an authorized attacker to elevate privileges over a network.
CVSS Score
9.9
EPSS Score
0.006
Published
2026-09-17
Incorrect authorization in Azure Arc allows an unauthorized attacker to elevate privileges over a network.
CVSS Score
10.0
EPSS Score
0.008
Published
2026-08-20
Improper access control in Azure Arc allows an unauthorized attacker to elevate privileges over a network.
CVSS Score
8.6
EPSS Score
0.015
Published
2026-02-05
Improper neutralization of special elements used in a command ('command injection') in Azure Arc allows an authorized attacker to elevate privileges locally.
CVSS Score
7.0
EPSS Score
0.009
Published
2025-03-11
Azure Guest Configuration and Azure Arc-enabled servers Elevation of Privilege Vulnerability
CVSS Score
7.8
EPSS Score
0.007
Published
2022-09-13