Skip to content
OpenAdvisories
Critical · 9.0 CVE-2026-114146 EUVD-2026-121971GHSA-67wp-ghc2-fw2g

ASP.NET Core Elevation of Privilege Vulnerability

Published Nov 10, 2026 · Updated Nov 13, 2026 · Assigned by microsoft

Vendor: Microsoft Product: .NET 10.0 installed on Linux Product: .NET 10.0 installed on Mac OS Product: .NET 10.0 installed on Windows Product: .NET 11.0 installed on Linux Product: .NET 11.0 installed on Mac OS Product: .NET 11.0 installed on Windows Product: .NET 8.0 installed on Linux Product: .NET 8.0 installed on Mac OS Product: .NET 8.0 installed on Windows Product: .NET 9.0 installed on Linux Product: .NET 9.0 installed on Mac OS Product: .NET 9.0 installed on Windows Product: Microsoft Visual Studio 2022 version 17.14 Product: Microsoft Visual Studio 2026 version 18.11 Product: Microsoft Visual Studio 2026 version 18.12 Product: Microsoft.AspNetCore.Http.Connections Package: dotnet-bootstrap-8 Package: dotnet-bootstrap-9 Package: dotnet10 Package: dotnet10-runtime Package: dotnet11 Package: dotnet6 Package: dotnet7 Package: dotnet8 Package: dotnet8-runtime Package: dotnet9-runtime Package: Microsoft.AspNetCore.App.Runtime.linux-arm Package: Microsoft.AspNetCore.App.Runtime.linux-arm64 Package: Microsoft.AspNetCore.App.Runtime.linux-musl-arm Package: Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 Package: Microsoft.AspNetCore.App.Runtime.linux-musl-x64 Package: Microsoft.AspNetCore.App.Runtime.linux-x64 Package: Microsoft.AspNetCore.App.Runtime.osx-arm64 Package: Microsoft.AspNetCore.App.Runtime.osx-x64 Package: Microsoft.AspNetCore.App.Runtime.win-arm64 Package: Microsoft.AspNetCore.App.Runtime.win-x64 Package: Microsoft.AspNetCore.App.Runtime.win-x86 Package: Microsoft.AspNetCore.Http.Connections Platform: Linux Platform: macOS Platform: Windows Ecosystem: Alpine Ecosystem: NuGet Ecosystem: Ubuntu Ecosystem: Wolfi

Description

Incorrect authorization in ASP.NET Core allows an authorized attacker to elevate privileges over a network.

Affected products

VendorProductAffectedFixed
Microsoft .NET 10.0 installed on Linux 10.0.0 – < 10.0.15 10.0.15
Microsoft .NET 10.0 installed on Mac OS 10.0.0 – < 10.0.15 10.0.15
Microsoft .NET 10.0 installed on Windows 10.0.0 – < 10.0.15 10.0.15
Microsoft .NET 11.0 installed on Linux 11.0.0-preview.1 – < 11.0.0 11.0.0
Microsoft .NET 11.0 installed on Mac OS 11.0.0-preview.1 – < 11.0.0 11.0.0
Microsoft .NET 11.0 installed on Windows 11.0.0-preview.1 – < 11.0.0 11.0.0
Microsoft .NET 8.0 installed on Linux 8.0.0 – < 8.0.34 8.0.34
Microsoft .NET 8.0 installed on Mac OS 8.0.0 – < 8.0.34 8.0.34
Microsoft .NET 8.0 installed on Windows 8.0.0 – < 8.0.34 8.0.34
Microsoft .NET 9.0 installed on Linux 9.0.0 – < 9.0.23 9.0.23
Microsoft .NET 9.0 installed on Mac OS 9.0.0 – < 9.0.23 9.0.23
Microsoft .NET 9.0 installed on Windows 9.0.0 – < 9.0.23 9.0.23
Microsoft Microsoft Visual Studio 2022 version 17.14 17.14.0 – < 17.14.45 17.14.45
Microsoft Microsoft Visual Studio 2026 version 18.11 18.11.0 – < 18.11.4 18.11.4
Microsoft Microsoft Visual Studio 2026 version 18.12 18.12.0 – < 18.12.0 18.12.0
Microsoft Microsoft.AspNetCore.Http.Connections 1.2.0 – < 1.2.14 1.2.14

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 26.10 dotnet10 10.0.115-10.0.15-0ubuntu1~26.10.1 USN-9042-1
Ubuntu 26.10 dotnet11 11.0.100-11.0.0-0ubuntu1~26.10.1 USN-9042-1
Ubuntu 26.04 LTS dotnet10 10.0.115-10.0.15-0ubuntu1~26.04.1 USN-9042-1
Ubuntu 24.04 LTS dotnet10 10.0.115-10.0.15-0ubuntu1~24.04.1 USN-9042-1
Ubuntu 24.04 LTS dotnet8 8.0.134-8.0.34-0ubuntu1~24.04.1 USN-9042-1
Ubuntu 22.04 LTS dotnet6 +1 No fix yet —
Ubuntu 22.04 LTS dotnet8 8.0.134-8.0.34-0ubuntu1~22.04.1 USN-9042-1

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 8 dotnet-hostfxr-10.0 +7 10.0.15-1.el8_10 ALSA-2026:99053
AlmaLinux 8 dotnet-hostfxr-8.0 +7 8.0.34-1.el8_10 ALSA-2026:99052
AlmaLinux 8 dotnet-hostfxr-9.0 +7 9.0.23-1.el8_10 ALSA-2026:99051
AlmaLinux 8 dotnet-sdk-10.0 +4 10.0.115-1.el8_10 ALSA-2026:99053
AlmaLinux 8 dotnet-sdk-8.0 +3 8.0.134-1.el8_10 ALSA-2026:99052
AlmaLinux 8 dotnet-sdk-9.0 +5 9.0.124-1.el8_10 ALSA-2026:99051

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 8 dotnet-hostfxr-10.0 +7 10.0.15-1.el8_10 RLSA-2026:99053
Rocky Linux 8 dotnet-hostfxr-8.0 +7 8.0.34-1.el8_10 RLSA-2026:99052
Rocky Linux 8 dotnet-hostfxr-9.0 +7 9.0.23-1.el8_10 RLSA-2026:99051
Rocky Linux 8 dotnet-sdk-10.0 +4 10.0.115-1.el8_10 RLSA-2026:99053
Rocky Linux 8 dotnet-sdk-8.0 +3 8.0.134-1.el8_10 RLSA-2026:99052
Rocky Linux 8 dotnet-sdk-9.0 +5 9.0.124-1.el8_10 RLSA-2026:99051

Alpine

Security tracker ↗
ReleasePackageFixed inAdvisory
Alpine v3.24 dotnet10-runtime 10.0.15-r0 —
Alpine v3.24 dotnet8-runtime 8.0.34-r0 —
Alpine v3.24 dotnet9-runtime 9.0.23-r0 —
Alpine v3.23 dotnet8-runtime 8.0.34-r0 —
Alpine v3.23 dotnet9-runtime 9.0.23-r0 —
Alpine v3.22 dotnet8-runtime 8.0.34-r0 —
Alpine v3.22 dotnet9-runtime 9.0.23-r0 —

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling dotnet-bootstrap-8 +1 No fix yet —

Affected packages

EcosystemPackageAffectedFixedRecord
NuGet Microsoft.AspNetCore.App.Runtime.linux-arm >= 8.0.0-preview.1.23112.2, < 8.0.34 8.0.34 GHSA-67wp-ghc2-fw2g
NuGet Microsoft.AspNetCore.App.Runtime.linux-arm >= 9.0.0-preview.1.24081.5, < 9.0.23 9.0.23 GHSA-67wp-ghc2-fw2g
NuGet Microsoft.AspNetCore.App.Runtime.linux-arm >= 10.0.0-preview.1.25120.3, < 10.0.15 10.0.15 GHSA-67wp-ghc2-fw2g
NuGet Microsoft.AspNetCore.App.Runtime.linux-arm >= 11.0.0-preview.1.26104.118, < 11.0.0 11.0.0 GHSA-67wp-ghc2-fw2g
NuGet Microsoft.AspNetCore.App.Runtime.linux-arm64 >= 8.0.0-preview.1.23112.2, < 8.0.34 8.0.34 GHSA-67wp-ghc2-fw2g
NuGet Microsoft.AspNetCore.App.Runtime.linux-arm64 >= 9.0.0-preview.1.24081.5, < 9.0.23 9.0.23 GHSA-67wp-ghc2-fw2g
NuGet Microsoft.AspNetCore.App.Runtime.linux-arm64 >= 10.0.0-preview.1.25120.3, < 10.0.15 10.0.15 GHSA-67wp-ghc2-fw2g
NuGet Microsoft.AspNetCore.App.Runtime.linux-arm64 >= 11.0.0-preview.1.26104.118, < 11.0.0 11.0.0 GHSA-67wp-ghc2-fw2g
NuGet Microsoft.AspNetCore.App.Runtime.linux-musl-arm >= 8.0.0-preview.1.23112.2, < 8.0.34 8.0.34 GHSA-67wp-ghc2-fw2g
NuGet Microsoft.AspNetCore.App.Runtime.linux-musl-arm >= 9.0.0-preview.1.24081.5, < 9.0.23 9.0.23 GHSA-67wp-ghc2-fw2g
NuGet Microsoft.AspNetCore.App.Runtime.linux-musl-arm >= 10.0.0-preview.1.25120.3, < 10.0.15 10.0.15 GHSA-67wp-ghc2-fw2g
NuGet Microsoft.AspNetCore.App.Runtime.linux-musl-arm >= 11.0.0-preview.1.26104.118, < 11.0.0 11.0.0 GHSA-67wp-ghc2-fw2g
NuGet Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 >= 8.0.0-preview.1.23112.2, < 8.0.34 8.0.34 GHSA-67wp-ghc2-fw2g
NuGet Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 >= 9.0.0-preview.1.24081.5, < 9.0.23 9.0.23 GHSA-67wp-ghc2-fw2g
NuGet Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 >= 10.0.0-preview.1.25120.3, < 10.0.15 10.0.15 GHSA-67wp-ghc2-fw2g
NuGet Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 >= 11.0.0-preview.1.26104.118, < 11.0.0 11.0.0 GHSA-67wp-ghc2-fw2g
NuGet Microsoft.AspNetCore.App.Runtime.linux-musl-x64 >= 8.0.0-preview.1.23112.2, < 8.0.34 8.0.34 GHSA-67wp-ghc2-fw2g
NuGet Microsoft.AspNetCore.App.Runtime.linux-musl-x64 >= 9.0.0-preview.1.24081.5, < 9.0.23 9.0.23 GHSA-67wp-ghc2-fw2g
NuGet Microsoft.AspNetCore.App.Runtime.linux-musl-x64 >= 10.0.0-preview.1.25120.3, < 10.0.15 10.0.15 GHSA-67wp-ghc2-fw2g
NuGet Microsoft.AspNetCore.App.Runtime.linux-musl-x64 >= 11.0.0-preview.1.26104.118, < 11.0.0 11.0.0 GHSA-67wp-ghc2-fw2g
NuGet Microsoft.AspNetCore.App.Runtime.linux-x64 >= 8.0.0-preview.1.23112.2, < 8.0.34 8.0.34 GHSA-67wp-ghc2-fw2g
NuGet Microsoft.AspNetCore.App.Runtime.linux-x64 >= 9.0.0-preview.1.24081.5, < 9.0.23 9.0.23 GHSA-67wp-ghc2-fw2g
NuGet Microsoft.AspNetCore.App.Runtime.linux-x64 >= 10.0.0-preview.1.25120.3, < 10.0.15 10.0.15 GHSA-67wp-ghc2-fw2g
NuGet Microsoft.AspNetCore.App.Runtime.linux-x64 >= 11.0.0-preview.1.26104.118, < 11.0.0 11.0.0 GHSA-67wp-ghc2-fw2g
NuGet Microsoft.AspNetCore.App.Runtime.osx-arm64 >= 8.0.0-preview.1.23112.2, < 8.0.34 8.0.34 GHSA-67wp-ghc2-fw2g
NuGet Microsoft.AspNetCore.App.Runtime.osx-arm64 >= 9.0.0-preview.1.24081.5, < 9.0.23 9.0.23 GHSA-67wp-ghc2-fw2g
NuGet Microsoft.AspNetCore.App.Runtime.osx-arm64 >= 10.0.0-preview.1.25120.3, < 10.0.15 10.0.15 GHSA-67wp-ghc2-fw2g
NuGet Microsoft.AspNetCore.App.Runtime.osx-arm64 >= 11.0.0-preview.1.26104.118, < 11.0.0 11.0.0 GHSA-67wp-ghc2-fw2g
NuGet Microsoft.AspNetCore.App.Runtime.osx-x64 >= 8.0.0-preview.1.23112.2, < 8.0.34 8.0.34 GHSA-67wp-ghc2-fw2g
NuGet Microsoft.AspNetCore.App.Runtime.osx-x64 >= 9.0.0-preview.1.24081.5, < 9.0.23 9.0.23 GHSA-67wp-ghc2-fw2g
NuGet Microsoft.AspNetCore.App.Runtime.osx-x64 >= 10.0.0-preview.1.25120.3, < 10.0.15 10.0.15 GHSA-67wp-ghc2-fw2g
NuGet Microsoft.AspNetCore.App.Runtime.osx-x64 >= 11.0.0-preview.1.26104.118, < 11.0.0 11.0.0 GHSA-67wp-ghc2-fw2g
NuGet Microsoft.AspNetCore.App.Runtime.win-arm64 >= 8.0.0-preview.1.23112.2, < 8.0.34 8.0.34 GHSA-67wp-ghc2-fw2g
NuGet Microsoft.AspNetCore.App.Runtime.win-arm64 >= 9.0.0-preview.1.24081.5, < 9.0.23 9.0.23 GHSA-67wp-ghc2-fw2g
NuGet Microsoft.AspNetCore.App.Runtime.win-arm64 >= 10.0.0-preview.1.25120.3, < 10.0.15 10.0.15 GHSA-67wp-ghc2-fw2g
NuGet Microsoft.AspNetCore.App.Runtime.win-arm64 >= 11.0.0-preview.1.26104.118, < 11.0.0 11.0.0 GHSA-67wp-ghc2-fw2g
NuGet Microsoft.AspNetCore.App.Runtime.win-x64 >= 8.0.0-preview.1.23112.2, < 8.0.34 8.0.34 GHSA-67wp-ghc2-fw2g
NuGet Microsoft.AspNetCore.App.Runtime.win-x64 >= 9.0.0-preview.1.24081.5, < 9.0.23 9.0.23 GHSA-67wp-ghc2-fw2g
NuGet Microsoft.AspNetCore.App.Runtime.win-x64 >= 10.0.0-preview.1.25120.3, < 10.0.15 10.0.15 GHSA-67wp-ghc2-fw2g
NuGet Microsoft.AspNetCore.App.Runtime.win-x64 >= 11.0.0-preview.1.26104.118, < 11.0.0 11.0.0 GHSA-67wp-ghc2-fw2g
NuGet Microsoft.AspNetCore.App.Runtime.win-x86 >= 8.0.0-preview.1.23112.2, < 8.0.34 8.0.34 GHSA-67wp-ghc2-fw2g
NuGet Microsoft.AspNetCore.App.Runtime.win-x86 >= 9.0.0-preview.1.24081.5, < 9.0.23 9.0.23 GHSA-67wp-ghc2-fw2g
NuGet Microsoft.AspNetCore.App.Runtime.win-x86 >= 10.0.0-preview.1.25120.3, < 10.0.15 10.0.15 GHSA-67wp-ghc2-fw2g
NuGet Microsoft.AspNetCore.App.Runtime.win-x86 >= 11.0.0-preview.1.26104.118, < 11.0.0 11.0.0 GHSA-67wp-ghc2-fw2g
NuGet Microsoft.AspNetCore.Http.Connections >= 1.2.0, < 1.2.14 1.2.14 GHSA-67wp-ghc2-fw2g

Advisories 10

References