What is the CVSS score of CVE-2025-58724?

CVE-2025-58724 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.6%.

Which versions of Azure Arc agent are affected by CVE-2025-58724?

A high-severity privilege-escalation flaw (CVE-2025-58724) in Microsoft's Azure Connected Machine Agent - the component that onboards servers into Azure Arc - would let an attacker who already holds…

How to fix or mitigate CVE-2025-58724?

Within 24 hours, inventory every host running the Azure Connected Machine Agent (azcmagent) and record its version against Microsoft's Arc agent release notes, confirming there is no fixed version published as of this analysis; simultaneously restrict interactive local logon on Arc-connected hosts to a minimal administrator set and enable forwarding of privilege-related events (Windows 4672/4688 or Linux sudo/auth logs) plus azcmagent service logs to the SIEM. Within 7 days, uninstall or decommission the Arc agent on any host that does not genuinely require hybrid management, harden local group membership by removing non-administrators from privileged groups and the Arc service account, and deploy EDR behavior rules that alert on token manipulation or unexpected privilege elevation by non-admin processes on these endpoints. Within 30 days, monitor Microsoft's advisory for CVE-2025-58724 and the next Azure Connected Machine Agent release, pilot it in a non-production ring, and roll it into production on release; in the interim, add the agent installation path and service to application-control allowlists and fold all Arc-connected hosts into credential-rotation and incident-response scope so suspected local escalation is investigated as a potential cloud-identity compromise.

Azure Arc agent CVE-2025-58724

HIGH

Improper Access Control (CWE-284)

2025-10-14 secure@microsoft.com

Authentication Bypass Microsoft Azure Connected Machine Agent

7.8

CVSS 3.1 · Vendor: microsoft

Severity by source

Vendor (microsoft) PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

7.8 HIGH

Local privilege escalation requiring an existing low-privileged local account, so AV:L and PR:L; escalation to SYSTEM/root yields full C/I/A impact with no user interaction.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (microsoft).

CVSS VectorVendor: microsoft

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Oct 08, 2026 - 13:01 vuln.today

CVE Published

Oct 14, 2025 - 17:15 cve.org

HIGH 7.8

DescriptionCVE.org

Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.

AnalysisAI

Local privilege escalation in the Azure Arc agent (Azure Connected Machine Agent) allows an authenticated, low-privileged local user on an Arc-onboarded host to gain elevated privileges. The flaw is an improper access control issue (CWE-284) affecting installations of the Microsoft agent; exploitation requires an existing local foothold and does not provide remote access or require user interaction. No public exploit was identified at time of analysis, and EPSS is 0.57% (46th percentile).

Technical ContextAI

The Azure Connected Machine Agent, commonly called the Azure Arc agent, runs on servers outside Azure to project them into Azure Resource Manager for management, extensions, and policy. CVE-2025-58724 is rooted in CWE-284 (Improper Access Control), meaning privileged agent operations lack adequate authorization checks, allowing a local low-privileged user to perform actions with higher integrity and confidentiality impact. The CVSS vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H indicates local access, low complexity, authenticated low privileges, no user interaction, and high impact to confidentiality, integrity, and availability. The CPE cpe:2.3:a:microsoft:azure_connected_machine_agent:*:*:*:*:*:*:*:* identifies the Microsoft Azure Connected Machine Agent with a wildcard version in the provided data, so affected builds should be confirmed against the MSRC advisory.

RemediationAI

Apply the update available through Microsoft's MSRC update guide at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58724; patch availability is indicated by the vendor advisory, but the exact fixed version is not specified in the supplied data. Until updated, restrict interactive and local logon rights on Arc-enabled machines to trusted administrators and service accounts, and remove or disable unnecessary low-privileged local accounts, understanding this only reduces the attack surface and does not fix the improper access control once an attacker has local execution. Monitor agent service and elevation activity for anomalies; there is no remote workaround because exploitation requires local access.