CVE-2025-59494: Microsoft Azure Monitor Agent

High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Improper access control in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.

Affected products

• Microsoft Azure Monitor Agent: before 1.38.1 (fixed in 1.38.1)

Published 2025-10-14. Last modified 2026-10-08.