CVE-2024-8975: Grafana Alloy on Windows Unquoted service path
Unquoted Search Path or Element vulnerability in Grafana Alloy on Windows allows Privilege Escalation from Local User to SYSTEM This issue affects Alloy: before 1.3.3, from 1.4.0-rc.0 through 1.4.0-rc.1.
Other sources
Unquoted Search Path or Element vulnerability in Grafana Alloy on Windows allows Privilege Escalation from Local User to SYSTEM. This issue affects Alloy: before 1.3.4, from 1.4.0-rc.0 and prior to 1.4.1.
— GitHub
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-8975?
CVE-2024-8975 is classified as a high severity vulnerability due to its potential for privilege escalation.
How do I fix CVE-2024-8975?
To mitigate CVE-2024-8975, upgrade Grafana Alloy to version 1.4.1 or 1.3.4.
Which versions of Grafana Alloy are affected by CVE-2024-8975?
Grafana Alloy versions before 1.3.3 and 1.4.0-rc.0 through 1.4.0-rc.1 are affected by CVE-2024-8975.
What kind of vulnerability is CVE-2024-8975?
CVE-2024-8975 is an Unquoted Search Path or Element vulnerability that allows privilege escalation from a local user to SYSTEM.
Is my Windows system at risk if I use Grafana Alloy?
If you are running affected versions of Grafana Alloy on Windows, your system is at risk due to CVE-2024-8975.