Description
Insertion of sensitive information into sent data in .NET Aspire allows an authorized attacker to elevate privileges locally.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Aspire.Hosting | 13.6.4 – < 13.6.5 | 13.6.5 |
| Microsoft | Aspire.Hosting.AppHost | 13.6.4 – < 13.6.5 | 13.6.5 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 22.04 LTS | dotnet7 | No fix yet | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| NuGet | Aspire.Hosting | < 13.6.5 | 13.6.5 | GHSA-f7vh-h5g3-7jrh |
| NuGet | Aspire.Hosting.AppHost | < 13.6.5 | 13.6.5 | GHSA-f7vh-h5g3-7jrh |
Advisories 1
- MSRC-CVE-2026-120006 Aspire Elevation of Privilege Vulnerability Microsoft Security Response Center · Nov 11, 2026
References
- Aspire Elevation of Privilege Vulnerability vendor-advisory patch