~ / search / GHSA-m5gv-m5f9-wgv4

GHSA-m5gv-m5f9-wgv4

Grafana Agent (Flow mode) on Windows has Unquoted Search Path or Element vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2024-8996

Packages

EcosystemPackageAffectedFixed in
Go github.com/grafana/agent < 0.43.3 0.43.3

Details

As written in the advisory (Markdown source, shown as plain text).

Unquoted Search Path or Element vulnerability in Grafana Agent (Flow mode) on Windows allows Privilege Escalation from Local User to SYSTEM. This issue affects Agent Flow before 0.43.3.

References

External links from the advisory. They lead to third-party sites.