CVE-2024-8996

Summary

CVE-2024-8996 is a newly disclosed vulnerability affecting the Grafana Agent in Flow mode on Windows systems. This issue involves an Unquoted Search Path or Element vulnerability, which can allow a local user to escalate privileges and gain SYSTEM level access. The vulnerability impacts Grafana Agent Flow before version 0.43.2. This weakness could potentially enable an attacker to execute arbitrary code and take complete control of the affected Windows system. Organizations using the Grafana Agent in Flow mode on Windows should urgently update to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.