The vulnerability is a server‑side request forgery in Azure Arc that can be exploited by an attacker who already has legitimate access to the Azure Connected Machine Agent. By sending specially crafted HTTP requests, the attacker can force the agent to communicate with internal network services and perform actions at a higher privilege level. This results in a local elevation of privileges. The weakness is identified as CWE‑918.

Microsoft Azure Arc Enabled Servers, specifically the Azure Connected Machine Agent component. No version information is reported, so any installation of the agent that has not received the latest patch is potentially vulnerable.

The CVSS score is 6.5, indicating medium severity. The EPSS score is not available, so the current exploit likelihood cannot be quantified. The vulnerability is not listed in CISA’s KEV catalog. The likely attack vector is obfuscated internal requests from an authorized endpoint, meaning the attacker must have network reach to the agent and be able to send malicious requests. While no public exploits have been observed, the ability to gain privileged access could be leveraged to compromise the host environment.