Description
External control of file name or path in .NET allows an unauthorized attacker to elevate privileges over a network.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Microsoft Visual Studio 2022 version 17.14 | 17.14.0 – < 17.14.40 | 17.14.40 |
| Microsoft | Microsoft Visual Studio 2026 version 18.9 | 18.9.0 – < 18.9.3 | 18.9.3 |
| Microsoft | Microsoft.Diagnostics.Runtime | 4.1.740301 – < 4.1.740301 | 4.1.740301 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | dotnet +5 | 8.0.131-1.amzn2023.0.2 | ALAS2023-2026-3114, ALAS2023-2026-3113, ALAS2023-2026-3111 |
| Amazon Linux 2023 | dotnet-host +8 | 8.0.31-1.amzn2023.0.2 | ALAS2023-2026-3114, ALAS2023-2026-3113, ALAS2023-2026-3111 |
| Amazon Linux 2023 | dotnet-hostfxr-10.0 +7 | 10.0.12-1.amzn2023.0.2 | ALAS2023-2026-3111 |
| Amazon Linux 2023 | dotnet-hostfxr-9.0 +7 | 9.0.20-1.amzn2023.0.3 | ALAS2023-2026-3113 |
| Amazon Linux 2023 | dotnet-sdk-10.0 +4 | 10.0.112-1.amzn2023.0.2 | ALAS2023-2026-3111 |
| Amazon Linux 2023 | dotnet-sdk-9.0 +4 | 9.0.121-1.amzn2023.0.3 | ALAS2023-2026-3113 |
Advisories 5
- ALAS2023-2026-3111 Important: dotnet10.0 security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Oct 28, 2026
- ALAS2023-2026-3113 Important: dotnet9.0 security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Oct 28, 2026
- ALAS2023-2026-3114 Important: dotnet8.0 security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Oct 28, 2026
- WID-SEC-2026-3242 Microsoft Entwicklerwerkzeuge: Mehrere Schwachstellen ermöglichen Privilegieneskalation BSI CERT-Bund (WID) · Oct 6, 2026
- MSRC-CVE-2026-69805 .NET Elevation of Privilege Vulnerability Microsoft Security Response Center · Sep 8, 2026
References
- .NET Elevation of Privilege Vulnerability vendor-advisory patch