CVE-2025-58724: Azure Connected Machine Agent Escalation

CVE-2025-58724 Overview

CVE-2025-58724 is an improper access control vulnerability [CWE-284] in the Microsoft Azure Connected Machine Agent. The agent extends Azure Arc management to non-Azure servers, running with elevated privileges on Windows and Linux hosts. An authorized local attacker can exploit the flaw to elevate privileges on the affected system. Successful exploitation grants high confidentiality, integrity, and availability impact on the target host. Microsoft published the advisory on October 14, 2025, and no public exploit is currently available.

Critical Impact
A local, authenticated attacker can escalate privileges to gain full control over hosts running the Azure Connected Machine Agent, compromising Arc-managed servers.

Affected Products

Microsoft Azure Connected Machine Agent (Windows and Linux hybrid/Arc-managed servers)
Azure Arc-enabled servers relying on the vulnerable agent build
On-premises and multi-cloud hosts onboarded to Azure Arc through this agent

Discovery Timeline

2025-10-14 - CVE-2025-58724 assigned and published by Microsoft
2025-10-14 - CVE-2025-58724 published to NVD
2026-06-17 - Last updated in NVD database

Technical Details for CVE-2025-58724

Vulnerability Analysis

The Azure Connected Machine Agent (azcmagent) provides the control plane that connects non-Azure servers to Azure Arc. It runs privileged services responsible for identity, extension management, and policy enforcement on the host. The vulnerability stems from improper access control within one of these privileged components. An authorized local user can interact with a resource the agent exposes without adequate permission checks. This allows the attacker to influence a privileged operation and gain SYSTEM-level or root-equivalent execution. The attack requires local access with low privileges and no user interaction, making it viable in multi-user server environments.

Root Cause

The root cause is mapped to [CWE-284] Improper Access Control. A protected resource, interface, or file managed by the Connected Machine Agent lacks sufficient authorization checks. Low-privileged callers can therefore reach functionality reserved for administrators or the agent service account.

Attack Vector

Exploitation requires local access to a host with the vulnerable Azure Connected Machine Agent installed. The attacker uses an existing low-privileged account to invoke or manipulate agent-exposed resources such as configuration files, named pipes, or extension handlers. Because the agent operates with elevated rights, abuse of the exposed interface yields privilege elevation on the local machine. See the Microsoft CVE-2025-58724 Advisory for vendor-specific technical detail.

No verified public proof-of-concept code is available. Microsoft has not released exploitation details, and no entry exists in Exploit-DB or the CISA KEV catalog.

Detection Methods for CVE-2025-58724

Indicators of Compromise

Unexpected child processes spawned by azcmagent.exe, himds.exe, or gcarcservice running with SYSTEM or root privileges
Modification of files under %ProgramFiles%\AzureConnectedMachineAgent\ or /opt/azcmagent/ by non-administrative users
New or altered Arc extensions installed outside of an approved change window
Local accounts suddenly obtaining membership in privileged groups on Arc-managed hosts

Detection Strategies

Baseline the process tree of the Hybrid Instance Metadata Service (himds) and alert on deviations that produce interactive shells or scripting hosts.
Monitor file integrity on agent binaries, configuration files, and extension directories.
Correlate Azure Arc activity logs with local security event logs to identify extension deployments that lack a matching Azure control-plane request.

Monitoring Recommendations

Ingest Windows Security, Sysmon, and Linux auditd telemetry from Arc-managed servers into a centralized analytics platform.
Track privilege escalation events (Windows Event ID 4672, setuid execve on Linux) originating from agent-related processes.
Review Azure Arc audit and activity logs for unauthorized agent version changes or extension operations.

How to Mitigate CVE-2025-58724

Immediate Actions Required

Inventory every host running the Azure Connected Machine Agent and identify the installed version.
Upgrade the Azure Connected Machine Agent to the fixed version listed in the Microsoft Security Response Center advisory.
Restrict local logon rights on Arc-managed servers to reduce the population of accounts capable of exploiting the flaw.
Audit local group membership and recent extension deployments on affected hosts for signs of abuse.

Patch Information

Microsoft has released an updated Azure Connected Machine Agent that resolves the improper access control condition. Refer to the Microsoft CVE-2025-58724 Advisory for the fixed version and download locations. The agent supports automatic upgrade through Azure Arc; enable this option to receive future security fixes without manual intervention.

Workarounds

No official workaround has been published. Apply the vendor patch as the primary remediation.
Where patching must be delayed, limit interactive and remote logon on Arc-managed servers to trusted administrators only.
Enforce application control policies that block unauthorized binaries from interacting with agent files and interfaces.

bash

# Verify current Azure Connected Machine Agent version and enable automatic upgrade
azcmagent show
azcmagent config set incomingconnections.enabled false
azcmagent config set guestconfiguration.enabled true
# Trigger manual upgrade check (Windows)
azcmagent upgrade