Unauthenticated adjacent-network privilege escalation via certificate validation

Improper certificate validation in Microsoft Azure Monitor Agent Metrics Extension before 1.65 allows remote attackers to elevate privileges. Microsoft has not disclosed which Metrics Extension connection accepts an untrusted certificate or how that certificate crosses a privilege boundary. No authentication or user interaction is required, but the attacker must reach the affected host from an adjacent network; the reported consequence is elevated privileges.