CVE-2025-59494

Improper neutralization of special elements used in a command (command injection) in Azure Monitor Agent allows an authorized attacker to elevate privileges over a network.

Untrusted search path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.

The Azure Monitor Agent has a vulnerability related to external control of file name or path, allowing an authorized attacker to elevate privileges locally.

Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.

Improper input validation in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.

An out-of-bounds write vulnerability in Azure Monitor Agent allows an authorized attacker to execute code over a network.

A heap-based buffer overflow exists in Azure Monitor Agent. An unauthorized attacker can exploit this vulnerability to execute code locally.

A deserialization of untrusted data vulnerability in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.

A vulnerability in the Azure Monitor Agent allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.