CVE-2024-8996CWE-428

Grafana Agent Flow on Windows Unquoted service path

High · published September 25, 2024

CVSS v3.1
7.3
EPSS
0%
Percentile
17.3
In the wild
Unconfirmed
What it is

Unquoted Search Path or Element vulnerability in Grafana Agent (Flow mode) on Windows allows Privilege Escalation from Local User to SYSTEM

This issue affects Agent Flow: before 0.43.2

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00264 · 17.3th percentile
Weakness
CWE-428 · Unquoted Search Path or Element
Published
2024-09-25T16:45Z
EPSS history
Timeline
  • 25 SEP 16:45Z
    Grafana Agent Flow on Windows Unquoted service path
    cvelistv5