Description
Creation of temporary file in directory with insecure permissions in .NET Aspire allows an authorized attacker to elevate privileges locally.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Aspire.Cli | 13.5.4 – < 13.6.5 | 13.6.5 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 22.04 LTS | dotnet7 | No fix yet | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | @microsoft/aspire-cli | >= 13.4.2, < 13.6.5 | 13.6.5 | GHSA-m63f-xhvm-6mv5 |
| npm | @microsoft/aspire-cli-linux-arm64 | >= 13.4.2, < 13.6.5 | 13.6.5 | GHSA-m63f-xhvm-6mv5 |
| npm | @microsoft/aspire-cli-linux-musl-x64 | >= 13.4.2, < 13.6.5 | 13.6.5 | GHSA-m63f-xhvm-6mv5 |
| npm | @microsoft/aspire-cli-linux-x64 | >= 13.4.2, < 13.6.5 | 13.6.5 | GHSA-m63f-xhvm-6mv5 |
| npm | @microsoft/aspire-cli-osx-arm64 | >= 13.4.2, < 13.6.5 | 13.6.5 | GHSA-m63f-xhvm-6mv5 |
| npm | @microsoft/aspire-cli-osx-x64 | >= 13.4.2, < 13.6.5 | 13.6.5 | GHSA-m63f-xhvm-6mv5 |
| NuGet | Aspire.Cli | >= 13.2.0, < 13.6.5 | 13.6.5 | GHSA-m63f-xhvm-6mv5 |
| NuGet | Aspire.Cli.linux-arm64 | >= 13.3.0, < 13.6.5 | 13.6.5 | GHSA-m63f-xhvm-6mv5 |
| NuGet | Aspire.Cli.linux-musl-x64 | >= 13.3.0, < 13.6.5 | 13.6.5 | GHSA-m63f-xhvm-6mv5 |
| NuGet | Aspire.Cli.linux-x64 | >= 13.3.0, < 13.6.5 | 13.6.5 | GHSA-m63f-xhvm-6mv5 |
| NuGet | Aspire.Cli.osx-arm64 | >= 13.3.0, < 13.6.5 | 13.6.5 | GHSA-m63f-xhvm-6mv5 |
| NuGet | Aspire.Cli.osx-x64 | >= 13.3.0, < 13.6.5 | 13.6.5 | GHSA-m63f-xhvm-6mv5 |
Advisories 2
- MSRC-CVE-2026-120778 Aspire Elevation of Privilege Vulnerability Microsoft Security Response Center · Nov 11, 2026
- NCSC-2026-0473 Kwetsbaarheden verholpen in Microsoft Developer Tools NCSC-NL (Netherlands) · Nov 10, 2026
References
- Aspire Elevation of Privilege Vulnerability vendor-advisory patch