Grafana Agent (Flow mode) on Windows has Unquoted Search Path or Element vulnerability
Unquoted Search Path or Element vulnerability in Grafana Agent (Flow mode) on Windows allows Privilege Escalation from Local User to SYSTEM. This issue affects Agent Flow before 0.43.3.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-8996US | high7.8 | — | ||
Unquoted Search Path or Element vulnerability in Grafana Agent (Flow mode) on Windows allows Privilege Escalation from Local User to SYSTEM
This issue affects Agent Flow: before 0.… | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/grafana/agentPACKAGE
- https://github.com/grafana/agent/commit/91bab2c05906938d3f8e1e3c61a863f037985299WEB
- https://github.com/grafana/agent/releases/tag/v0.43.2WEB
- https://github.com/grafana/agent/releases/tag/v0.43.3WEB
- https://grafana.com/blog/2024/09/25/grafana-alloy-and-grafana-agent-flow-security-release-high-severity-fix-for-cve-2024-8975-and-cve-2024-8996WEB
- https://grafana.com/security/security-advisories/cve-2024-8996WEB
- https://nvd.nist.gov/vuln/detail/CVE-2024-8996ADVISORY
- https://pkg.go.dev/vuln/GO-2024-3170WEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan