Aspire Elevation of Privilege Vulnerability
Historical advisory recorded 10 Nov 2026 20:21:22 UTC. Read the latest advisory.
cve-program · CVE-2026-120778
PublishedCreation of temporary file in directory with insecure permissions in .NET Aspire allows an authorized attacker to elevate privileges locally.
Read the publisher's advisoryAffected versions, risk and source history
cve-program · CVE-2026-120778
PublishedAspire Elevation of Privilege Vulnerability
Creation of temporary file in directory with insecure permissions in .NET Aspire allows an authorized attacker to elevate privileges locally.
- Source published
- 10 Nov 2026 18:23:52 UTC
- Source modified
- 10 Nov 2026 18:47:21 UTC
- Saved here
- 10 Nov 2026 20:21:22 UTC
- Source terms
- CVE Program Terms of Use
Original source record · Cite this exact observation · Complete original publisher JSON
Source: cve-program · CVE Program Terms of Use. The publisher's wording is preserved. ChangeIntel groups the information and labels changes. The JSON record includes additional source fields.
CVSS 3.1 · 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C