CVE-2025-21199: Privilege Escalation in Azure Agent for Backup

Successful exploitation of CVE-2025-21199 allows an attacker who already has some level of access to the system to gain elevated privileges. This could enable them to install malware, modify system configurations, access sensitive data, or compromise other resources on the affected machine. The impact is particularly concerning in environments where the Azure Agent for Backup is used to manage critical data, as an attacker could potentially gain control over the backup infrastructure itself. While the vulnerability requires authentication, the ability to escalate privileges significantly expands the attacker's potential reach and impact.

1. Reserved2024-12-05
2. Published2025-03-11
3. Modified2026-02-13
4. EPSS updated2026-04-02

The primary mitigation for CVE-2025-21199 is to upgrade the Azure Agent for Backup to version 9.30 or later. Prior to upgrading, it is recommended to back up the existing configuration to facilitate a rollback if necessary. If an immediate upgrade is not feasible, consider restricting access to the Azure Agent Installer and implementing stricter privilege controls on the affected systems. After upgrading, verify the installation by checking the agent version and confirming that no unauthorized processes are running with elevated privileges using Task Manager or PowerShell.