CVE-2026-26131

HIGH7.8EPSS 0.03%

.NET Elevation of Privilege Vulnerability

發布日:2026/3/11修改日:2026/4/6

也稱為:GHSA-crjq-wm6x-6qx7BIT-dotnet-2026-26131BIT-dotnet-sdk-2026-26131

描述

Incorrect default permissions in .NET allows an authorized attacker to elevate privileges locally.

受影響套件(8)

Bitnami/dotnet>= 10.0.0, < 10.0.4
Bitnami/dotnet-sdk>= 10.0.0, < 10.0.4
NuGet/Microsoft.NetCore.App.Runtime.linux-arm>= 10.0.0, < 10.0.4
NuGet/Microsoft.NetCore.App.Runtime.linux-arm64>= 10.0.0, < 10.0.4
NuGet/Microsoft.NetCore.App.Runtime.linux-musl-arm>= 10.0.0, < 10.0.4
NuGet/Microsoft.NetCore.App.Runtime.linux-musl-arm64>= 10.0.0, < 10.0.4
NuGet/Microsoft.NetCore.App.Runtime.linux-musl-x64>= 10.0.0, < 10.0.4
NuGet/Microsoft.NetCore.App.Runtime.linux-x64>= 10.0.0, < 10.0.4

CVSS 分數

來源	版本	嚴重程度	向量
osv	CVSS 3.1	HIGH7.8	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

參考連結(4)