CVE-2026-32192: Microsoft Azure Monitor Agent

High severity, CVSS 7.8. EPSS: 2.5% chance of exploitation in the next 30 days.

Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.

Affected products

• Microsoft Azure Monitor Agent: before 1.41.0 (fixed in 1.41.0)

Published 2026-04-14. Last modified 2026-06-17.