A critical authorization flaw in Microsoft Windows Admin Center can allow an authenticated attacker to escalate their privileges within the network.

This is a CWE-862: Missing Authorization vulnerability. It allows an attacker who has already gained low-level access to the system to perform unauthorized actions that should be restricted to higher privilege levels.

The CVSS score of 8.3 underscores the severity of this privilege escalation flaw. Successful exploitation can lead to a complete compromise of the Windows Admin Center, enabling an attacker to manage infrastructure, modify system configurations, and move laterally across the network, leading to significant operational disruption.

Immediate Action: Update to Windows Admin Center version 2.6.5.16 or later as specified in the official Microsoft security update guide.

Proactive Monitoring: Audit logs for unusual administrative activity or changes to user permissions initiated by non-administrator accounts.

Compensating Controls: Restrict access to the Windows Admin Center interface to only necessary administrative workstations and authorized personnel.

Public Exploit Available: Unknown.

Given the potential for full administrative takeover, administrators should verify their current version of Windows Admin Center and apply the update immediately. Proactive monitoring of the management interface is essential to identify any attempts to exploit this authorization gap.