In Puppet Bolt versions prior to 3.27.4, a path to escalate privileges was identified.
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-110324.json"