GCVE-110-CLOUD-2024-0049

Advisory Published

Vulnetix · Advisory published March 7, 2024

Tenable Research discovered a privilege escalation flaw that allows a user to escalate privileges to that of the root user within the context of a Spark VM. This escalation was achieved because of a permissions issue with scripts utilized by the intelligent caching service (AKA "Vegas") present in the environment.

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Azure	Synapse Analytics	—	—
Azure	Synapse	—	—

References

Synapse Analytics privilege escalation via intelligent caching

advisory

Browse GCVE Records

73,053 records in the GCVE database · Updated July 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON