Securing Azure middleware agents with new auto-patching capabilities

Wiz Research analyzed and validated a local privilege escalation vulnerability (CVE-2022-29149) in Microsoft OMI—cloud middleware used by multiple Azure services—developed a proof-of-concept exploit, and worked with Microsoft to improve advisories and enable Automatic Extension Upgrade for affected agents (OMS, Azure Diagnostics, DSC) so customers can receive timely updates and reduce exposure.