JEDI-SEC | Security Research & Digital Defense

GHSA-m63f-xhvm-6mv5: Microsoft Security Advisory CVE-2026-120778 – Aspire Elevation of Privilege Vulnerability

Written by

jedisec_u136k7

in

  • Severity: HIGH
  • CVE: CVE-2026-120778
  • Ecosystems: nuget, nuget, nuget, nuget, nuget, nuget, npm, npm, npm, npm, npm, npm
  • Packages: Aspire.Cli, Aspire.Cli.linux-x64, Aspire.Cli.linux-arm64, Aspire.Cli.linux-musl-x64, Aspire.Cli.osx-x64, Aspire.Cli.osx-arm64, @microsoft/aspire-cli, @microsoft/aspire-cli-linux-x64, @microsoft/aspire-cli-linux-arm64, @microsoft/aspire-cli-linux-musl-x64, @microsoft/aspire-cli-osx-x64, @microsoft/aspire-cli-osx-arm64

## Executive summary

Microsoft is releasing this security advisory to provide information about a vulnerability in the Aspire CLI. This advisory provides guidance on updating affected applications and components.

An insecure temporary directory used by Aspire CLI-generated builds can allow a local attacker to influence MSBuild response-file discovery and execute code with the privileges of the developer running the CLI.

## Announcement

Announcement for this issue can be found at https://github.com/dotnet/announcements/issues/519

## CVSS Details

– **Version:** 3.1
– **Severity:** High
– **Score:** 7.3
– **Vector:** `CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H`
– **Weakness:** CWE-379 (Creation of Temporary File in Directory with Insecure Permissions)
– **MSRC severity:** Important

## Affected Platforms

– **Platforms:** Linux, macOS
– **Architectures:** x64, Arm64

## Affected Packages

### Standalone Aspire CLI

Package | Affected version | Patched version
— | — | —
[Aspire.Cli](https://www.nuget.org/packages/Aspire.Cli) | >= 13.2.0, < 13.6.5 | 13.6.5
[Aspire.Cli.linux-x64](https://www.nuget.org/packages/Aspire.Cli.linux-x64) | >= 13.3.0, < 13.6.5 | 13.6.5
[Aspire.Cli.linux-arm64](https://www.nuget.org/packages/Aspire.Cli.linux-arm64) | >= 13.3.0, < 13.6.5 | 13.6.5
[Aspire.Cli.linux-musl-x64](https://www.nuget.org/packages/Aspire.Cli.linux-musl-x64) | >= 13.3.0, < 13.6.5 | 13.6.5
[Aspire.Cli.osx-x64](https://www.nuget.org/packages/Aspire.Cli.osx-x64) | >= 13.3.0…

Source: GitHub Security Advisories · 2026-11-11

More posts