JEDI-SEC | Security Research & Digital Defense

GHSA-6856-87hx-p5x7: Microsoft Security Advisory CVE-2026-105544 – .NET Elevation of Privilege Vulnerability

Written by

jedisec_u136k7

in

  • Severity: MEDIUM
  • Ecosystems: nuget, nuget, nuget, nuget, nuget, nuget, nuget, nuget, nuget, nuget, nuget, nuget, nuget, nuget, nuget, nuget, nuget, nuget, nuget, nuget, nuget, nuget, nuget, nuget, nuget, nuget, nuget, nuget, nuget, nuget, nuget, nuget, nuget, nuget, nuget, nuget, nuget, nuget, nuget, nuget, nuget, nuget, nuget, nuget, nuget, nuget, nuget, nuget, nuget, nuget, nuget, nuget, nuget, nuget, nuget, nuget, nuget, nuget, nuget
  • Packages: Microsoft.TestPlatform.CLI, Microsoft.TestPlatform.CLI, Microsoft.TestPlatform.CLI, Microsoft.TestPlatform.CLI, Microsoft.TestPlatform.CLI, Microsoft.TestPlatform.CLI, Microsoft.TestPlatform.CLI, Microsoft.TestPlatform.CLI, Microsoft.TestPlatform.CLI, Microsoft.TestPlatform.CLI, Microsoft.TestPlatform.CLI, Microsoft.TestPlatform.CLI, Microsoft.TestPlatform.CLI, Microsoft.TestPlatform.CLI, Microsoft.TestPlatform.CLI, Microsoft.TestPlatform.CLI, Microsoft.TestPlatform.CLI, Microsoft.TestPlatform.CLI, Microsoft.TestPlatform.CLI, Microsoft.TestPlatform.CLI, Microsoft.TestPlatform.CLI, Microsoft.TestPlatform.CLI, Microsoft.TestPlatform.CLI, Microsoft.TestPlatform.CLI, Microsoft.TestPlatform.CLI, Microsoft.TestPlatform.CLI, Microsoft.TestPlatform.CLI, Microsoft.TestPlatform.CLI, Microsoft.TestPlatform.CLI, Microsoft.TestPlatform.CLI, Microsoft.TestPlatform.CLI, Microsoft.TestPlatform.CLI, Microsoft.TestPlatform.CLI, Microsoft.TestPlatform.CLI, Microsoft.TestPlatform.CLI, Microsoft.TestPlatform.CLI, Microsoft.TestPlatform.CLI, Microsoft.TestPlatform.CLI, Microsoft.TestPlatform.CLI, Microsoft.TestPlatform.CLI, Microsoft.TestPlatform.CLI, Microsoft.TestPlatform.CLI, Microsoft.TestPlatform.CLI, Microsoft.TestPlatform.CLI, Microsoft.TestPlatform.CLI, Microsoft.TestPlatform.CLI, Microsoft.TestPlatform.CLI, Microsoft.TestPlatform.CLI, Microsoft.TestPlatform.CLI, Microsoft.TestPlatform.CLI, Microsoft.TestPlatform.CLI, Microsoft.TestPlatform.CLI, Microsoft.TestPlatform.CLI, Microsoft.TestPlatform.CLI, Microsoft.TestPlatform.CLI, Microsoft.TestPlatform.CLI, Microsoft.TestPlatform.CLI, Microsoft.TestPlatform.CLI, Microsoft.TestPlatform.CLI

## Executive summary

Microsoft is releasing this security advisory to provide information about a vulnerability in .NET. This advisory provides guidance on updating affected applications and components.

The VSTest artifact postprocessor can consume a forged `executionComplete.json` from another local user and execute attacker-controlled output handling.

## Announcement

Announcement for this issue can be found at https://github.com/dotnet/announcements/issues/517

## CVSS Details

– **Version:** 3.1
– **Severity:** High
– **Score:** 7.5 (base score)
– **Vector:** `CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C`
– **Weakness:** CWE-284

## Affected Platforms

– **Platforms:** Windows, Linux, macOS
– **Architectures:** All

## Affected Packages

The tables list affected versions of Microsoft.TestPlatform.CLI and their patched versions. The VSTest CLI is also bundled in the .NET SDK; SDK versions are listed separately below. Updating a separately installed CLI package does not replace the SDK-bundled test runner.

Microsoft.TestPlatform.CLI is affected starting with 17.2.0-preview-20220301-01, including the first stable release, 17.2.0. Use a patched version listed below for a compatible servicing line.

### VSTest NuGet package

Package | Affected version | Patched version
— | — | —
[Microsoft.TestPlatform.CLI](https://www.nuget.org/packages/Microsoft.TestPlatform.CLI) | >= 17.2.0-preview-20220301-01, < 17.3.0 | 17.3.4
[Microsoft.TestPlatform.CLI](https://w…

Source: GitHub Security Advisories · 2026-11-11

More posts