Aspire.Cli (>= 13.2.0, < 13.6.5) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/aspire.cli--13.2.0--13.6.5/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioWed, 11 Nov 2026 01:54:27 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgMicrosoft .NET Aspire: Elevation of Privilege via Insecure Temporary File Permissions (CVE-2026-120778)https://feed.craftedsignal.io/briefs/2026-11-aspire-eop/Wed, 11 Nov 2026 01:54:27 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-aspire-eop/An elevation of privilege vulnerability in .NET Aspire CLI (CVE-2026-120778) exists due to the creation of temporary files in directories with insecure permissions. This advisory is a duplicate of GHSA-m63f-xhvm-6mv5.The .NET Aspire CLI (affected versions: >= 13.2.0, < 13.6.5) creates temporary files in directories with insecure permissions, which allows a local attacker to elevate privileges. This advisory has been withdrawn as a duplicate of GHSA-m63f-xhvm-6mv5.

]]>highadvisory