CVE-2025-58724: Microsoft Azure Connected Machine Agent

High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.

Affected products

• Microsoft Azure Connected Machine Agent: before 1.57 (fixed in 1.57)

Published 2025-10-14. Last modified 2026-10-08.