How Azure Arc allows a DB admin to become SQL Server sysadmin – the vulnerability explained

Learn how db_ddladmin permissions plus Azure Arc's SQL extension create a confused-deputy attack path to sysadmin — and how to detect and mitigate it.…