CVE-2026-32192

CVE-2026-32192 is a deserialization vulnerability affecting Azure Monitor Agent that permits authorized local users to execute arbitrary code with elevated privileges on affected systems. The vulnerability stems from improper handling of untrusted data during the deserialization process, creating a privilege escalation vector for authenticated attackers with local access. With a CVSS score of 7.8 (HIGH), this vulnerability carries significant risk due to its high impact across confidentiality, integrity, and availability, combined with low attack complexity and no user interaction requirement. The vulnerability currently shows minimal active exploitation, as it does not appear on Microsoft's Known Exploited Vulnerabilities catalog and remains on the inactive hot list, suggesting limited real-world abuse to date. Organizations running Azure Monitor Agent should prioritize patching efforts given the high severity rating and the presence of a straightforward attack vector requiring only local access and standard user privileges.