CVE-2026-26117

Name of the Vulnerable Software and Affected Versions Azure Windows Virtual Machine Agent (affected versions not specified) Azure Arc on Windows (affected versions not specified)

Description A security issue exists in Azure Windows Virtual Machine Agent and Azure Arc on Windows that allows an attacker to bypass authentication using an alternate path or channel. Successful exploitation can lead to local privilege escalation, potentially allowing a low-privileged user to gain higher-level access to the system. A compromised machine running Azure Arc can allow an attacker to abuse the Arc identity flow and potentially pivot into the Azure environment.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.