This vulnerability, identified as CWE-426 (Untrusted Search Path), exists in the Azure Monitor Agent Metrics Extension version 1.0.0. It allows an authorized local attacker to elevate privileges by exploiting the untrusted search path. The CVSS 3.1 base score is 6.5, indicating medium severity, with attack vector local, low attack complexity, and privileges required low. The vulnerability does not impact confidentiality or availability but has a high impact on integrity. Microsoft has published an official fix and manages remediation for this cloud-hosted service.

An authorized local attacker can exploit the untrusted search path vulnerability to elevate their privileges on the affected system. This could allow modification or tampering with data or processes that require higher privileges. There is no impact on confidentiality or availability reported. No known exploits are currently active in the wild.

Microsoft has released an official fix for this vulnerability. Since the Azure Monitor Agent is a cloud service, Microsoft manages the remediation server-side. Users should ensure their Azure Monitor Agent Metrics Extension is updated to the fixed version as per Microsoft's advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42830. No additional user action is required beyond applying the official fix.