Cpe:2.3:a:zzzprojects:system.linq.dynamic.core:*:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3azzzprojectssystem.linq.dynamic.core/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioSat, 24 Oct 2026 21:31:16 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgSystem.Linq.Dynamic.Core: Remote Code Execution (CVE-2023-32571)https://feed.craftedsignal.io/briefs/2026-10-system-linq-dynamic-core-rce/Sat, 24 Oct 2026 21:31:16 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-system-linq-dynamic-core-rce/CVE-2023-32571 is a critical remote code execution vulnerability in System.Linq.Dynamic.Core affecting versions 1.0.7.10 through 1.2.25, triggered by the parsing of untrusted input in LINQ query methods.CVE-2023-32571 is a remote code execution vulnerability in the System.Linq.Dynamic.Core library. The flaw exists in the way the library parses untrusted input within specific LINQ methods, including Where, Select, and OrderBy. Successful exploitation allows for arbitrary assembly loading or direct system command execution. A public proof-of-concept exploit is available, demonstrating both assembly injection and direct process spawning.

Impact

The vulnerability allows unauthenticated, remote attackers to achieve full remote code execution on the underlying host. The CVSS score is 9.8 (Critical), reflecting the ability to achieve high levels of confidentiality, integrity, and availability impact without requiring user interaction or privileges.

Recommendation

  1. Inventory applications using the System.Linq.Dynamic.Core library to identify instances running versions within the 1.0.7.10 to 1.2.25 range.
  2. Update the library dependency to a version beyond 1.2.25 to remediate the vulnerability.
  3. Implement strict input validation for all data passed to LINQ query methods if immediate patching is not possible.
]]>criticaladvisory