CVE-2026-32168

CVE-2026-32168 is an improper input validation vulnerability in Azure Monitor Agent that permits authorized local users to escalate their privileges on affected systems. This vulnerability affects Azure Monitor Agent deployments across supported platforms and represents a local privilege escalation risk for organizations utilizing this Microsoft monitoring solution. The vulnerability carries a HIGH severity rating with a CVSS score of 7.8, reflecting low attack complexity and the requirement for local access with low-level user privileges. Successful exploitation would grant attackers high-impact capabilities including confidentiality, integrity, and availability compromise on the affected system. There is currently no evidence of active exploitation in the wild, as the vulnerability does not appear on the Known Exploited Vulnerabilities catalog and remains on the KEV inactive list. Community and researcher attention appears limited based on the low EPSS score of 0.000730000, though organizations should still prioritize patching given the local privilege escalation nature of the flaw. Exploit code availability and widespread adoption remain unknown at this time.