CVE-2025-47989 | Microsoft Arc Enabled Servers Azure Connected Machine Agent access control

A vulnerability was found in Microsoft Arc Enabled Servers. It has been rated as critical. This issue affects some unknown processing of the component Azure Connected Machine Agent. This manipulation causes improper access controls.

This vulnerability is handled as CVE-2025-47989. It is possible to launch the attack on the local host. There is not any exploit available.

It is suggested to install a patch to address this issue.VulDB Recent EntriesRead More