Azure File Sync Agent v23.2 Release - November 2026 (Security-only update)

This article describes the improvements and issues that are fixed in the Azure File Sync Agent v23.2 release that is dated November 2026. Additionally, this article contains installation instructions for this release.

Improvements and issues that are fixed

Fixes an issue in the Azure File Sync event manifest recovery script that incorrectly granted all users access to the StorageSyncAgent folder. This update also corrects permissions on existing servers, if needed. For more information about this vulnerability, see CVE-2026-118288. Note: The affected permissions are introduced only when running FixAfsEventsCorruption.ps1 or the cmdlet Debug-StorageSyncServer -FixAfsEventsCorruption is explicitly run on demand, and not during normal, automatic agent operation. Most users do not run this script or cmdlet and hence are not impacted.

How to obtain and install the Azure File Sync Agent

The Azure File Sync agent is available from Microsoft Update & Microsoft Update Catalog.

Microsoft Update

To obtain and install from Microsoft Update, follow these steps on a server that has Azure File Sync agent installed:

Windows Server 2025, 2022, Server 2019 and Server 2016

  1. Click Start, and then click Settings.
  2. In Settings, click Update & security.
  3. In the Windows Update window, click Check online for updates from Microsoft Update.
  4. Verify the Azure File Sync agent update is listed and then click Install now.

Microsoft Update Catalog

Go to the following website to manually download this update from the Microsoft Update Catalog:

Azure File Sync Agent v23.2 release: November 2026 (KB5072940)

To manually install the update package, extract the cab file and run the following command from an elevated command prompt:

msiexec.exe /p packagename.msp REINSTALLMODE=OMUS REINSTALL=StorageSyncAgent,StorageSyncAgentAzureFileSync,StorageSyncAgentGuardFilter,StorageSyncAgentUpdater /qb /l*v KB5072940.log

For example, to install the Azure File Sync agent update for Server 2016, run the following command:

msiexec.exe /p StorageSyncAgent_WS2016_KB5072940.msp REINSTALLMODE=OMUS REINSTALL=StorageSyncAgent,StorageSyncAgentAzureFileSync,StorageSyncAgentGuardFilter,StorageSyncAgentUpdater /qb /l*v KB5072940.log