Skip to content
OpenAdvisories
Critical · 9.1 CVE-2026-118740 EUVD-2026-122508GHSA-2f3w-v7f5-vpgxGHSA-4g86-54fm-h9h8

Aspire Security Feature Bypass Vulnerability

Published Nov 10, 2026 · Updated Nov 13, 2026 · Assigned by microsoft

Vendor: Microsoft Product: Aspire Dashboard Product: Aspire.Dashboard.Sdk.linux-x64 Package: Aspire.Dashboard.Sdk.linux-arm64 Package: Aspire.Dashboard.Sdk.linux-musl-x64 Package: Aspire.Dashboard.Sdk.linux-x64 Package: Aspire.Dashboard.Sdk.osx-arm64 Package: Aspire.Dashboard.Sdk.osx-x64 Package: Aspire.Dashboard.Sdk.win-arm64 Package: Aspire.Dashboard.Sdk.win-x64 Platform: Linux Ecosystem: NuGet

Description

Missing authorization in Aspire allows an unauthorized attacker to bypass a security feature over a network.

Affected products

VendorProductAffectedFixed
Microsoft Aspire Dashboard 13.6.1 – < 13.6.5 13.6.5
Microsoft Aspire.Dashboard.Sdk.linux-x64 13.6.1 – < 13.6.5 13.6.5

Affected packages

EcosystemPackageAffectedFixedRecord
NuGet Aspire.Dashboard.Sdk.linux-arm64 < 13.6.5 13.6.5 GHSA-4g86-54fm-h9h8
NuGet Aspire.Dashboard.Sdk.linux-musl-x64 < 13.6.5 13.6.5 GHSA-4g86-54fm-h9h8
NuGet Aspire.Dashboard.Sdk.linux-x64 < 13.6.5 13.6.5 GHSA-4g86-54fm-h9h8
NuGet Aspire.Dashboard.Sdk.osx-arm64 < 13.6.5 13.6.5 GHSA-4g86-54fm-h9h8
NuGet Aspire.Dashboard.Sdk.osx-x64 < 13.6.5 13.6.5 GHSA-4g86-54fm-h9h8
NuGet Aspire.Dashboard.Sdk.win-arm64 < 13.6.5 13.6.5 GHSA-4g86-54fm-h9h8
NuGet Aspire.Dashboard.Sdk.win-x64 < 13.6.5 13.6.5 GHSA-4g86-54fm-h9h8

Advisories 1

References