{"id":"CVE-2026-120006","kind":"vulnerability","aliases":["CVE-2026-120006","GHSA-f7vh-h5g3-7jrh"],"related":[],"title":"Microsoft Security Advisory CVE-2026-120006 - Aspire Elevation of Privilege Vulnerability","description":"## Executive summary\n\nMicrosoft is releasing this security advisory to provide information about a vulnerability in Aspire. This advisory provides guidance on updating affected applications and components.\n\nDisclosure of an Aspire Dashboard authentication cookie to a linked service can allow an attacker-controlled container to replay the authenticated session and execute code as the host developer.\n\n## Announcement\n\nAnnouncement for this issue can be found at https://github.com/dotnet/announcements/issues/503\n\n## CVSS Details\n\n- **Version:** 3.1\n- **Severity:** High\n- **Score:** 7.5\n- **Vector:** `CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H`\n- **Weakness:** CWE-201 (Insertion of Sensitive Information Into Sent Data)\n\n## Affected Platforms\n\n- **Platforms:** macOS\n- **Architectures:** x64, Arm64\n\n## <a name=\"affected-packages\"></a>Affected Packages\n\n### Standalone Aspire\n\nPackage | Affected version | Patched version\n--- | --- | ---\n[Aspire.Hosting.AppHost](https://www.nuget.org/packages/Aspire.Hosting.AppHost) | < 13.6.5 | 13.6.5\n[Aspire.Hosting](https://www.nuget.org/packages/Aspire.Hosting) | < 13.6.5 | 13.6.5\n\nThe affected scenario involves a Dashboard-authenticated AppHost workflow with an attacker-controlled container and a linked HTTPS YARP gateway. The affected hosting code is in `Aspire.Hosting`, a dependency of `Aspire.Hosting.AppHost`. `Aspire.AppHost.Sdk` supplies the AppHost package implicitly unless the project overrides the default references.\n\n## Advisory FAQ\n\n### <a name=\"how-affected\"></a>How do I know if I am affected?\n\nThe reported scenario involves a developer starting an Aspire AppHost, authenticating to its Dashboard, and following a resource link that routes to an attacker-controlled container. All released versions through 13.6.4 are affected.\n\nAspire ships independently of .NET. Installing a .NET runtime or SDK update does not establish that the affected Aspire components have been updated.\n\n### <a name=\"how-fix\"></a>How do I fix the issue?\n\nUpdate the AppHost project's `Aspire.Hosting.AppHost` package reference to version 13.6.5 or later. If the project obtains this package implicitly through `Aspire.AppHost.Sdk`, update that SDK reference to version 13.6.5 or later. Explicit package references or central version pins must also resolve `Aspire.Hosting` to version 13.6.5 or later. Restore dependencies, rebuild, and restart the AppHost after updating.\n\nUpdating only the .NET runtime, .NET SDK, Aspire CLI, or standalone Dashboard does not replace the AppHost project's hosting dependencies.\n\n## Other Information\n\n### Reporting Security Issues\n\nIf you have found a potential security issue in a supported version of .NET, please report it to the Microsoft Security Response Center (MSRC) via the [MSRC Researcher Portal](https://msrc.microsoft.com/report/vulnerability/new). Further information can be found in the MSRC [Report an Issue FAQ](https://www.microsoft.com/msrc/faqs-report-an-issue).\n\nSecurity reports made through MSRC may qualify for the Microsoft .NET Bounty. Details of the Microsoft .NET Bounty Program including terms and conditions are at https://aka.ms/corebounty.\n\n### Support\n\nYou can ask questions about this issue in the [Aspire repository](https://github.com/microsoft/aspire).\n\n### Disclaimer\n\nThe information provided in this advisory is provided \"as is\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.\n\n### External Links\n\n[CVE-2026-120006](https://www.cve.org/CVERecord?id=CVE-2026-120006)\n\n### Acknowledgements\n\n- samthewhitehat\n\n### Revisions\n\nV1.0 (November 10, 2026): Advisory published.","summary":".NET Aspire, Microsoft's framework for building distributed .NET apps, inserts sensitive information into data it sends. A local attacker with an existing account can use that exposed information to gain higher privileges.","severity":"high","cvss":7.5,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Aspire.Hosting","fixed":["13.6.5"],"affected":"< 13.6.5 (13.6.4 listed)","ecosystem":"nuget"},{"name":"Aspire.Hosting.AppHost","fixed":["13.6.5"],"affected":"< 13.6.5 (13.6.4 listed)","ecosystem":"nuget"},{"name":"Aspire.Hosting.AppHost","fixed":["13.6.5"],"affected":"< 13.6.5","ecosystem":"nuget"},{"name":"Aspire.Hosting","fixed":["13.6.5"],"affected":"< 13.6.5","ecosystem":"nuget"}],"ecosystems":["nuget"],"tags":["aspire","cwe-201","dotnet","runtime","windows"],"not_affected_if":["aspire-13.6.5-or-later","no-aspire-usage"],"how_to_check":"- Run dotnet list package --include-transitive and look for Aspire.Hosting or Aspire.Hosting.AppHost below 13.6.5.\n- Check .csproj and Directory.Packages.props for those package references or an Aspire AppHost SDK version.","fix":"Upgrade Aspire.Hosting and Aspire.Hosting.AppHost to 13.6.5 or later (the CNA lists versions below 13.6.5 as affected). The 13.6.5 release notes do not mention this CVE; confirm against the MSRC entry.","status":"open","published_at":"2026-11-10T19:20:26+00:00","first_seen_at":"2026-11-10T19:25:07+00:00","triaged_at":"2026-11-10T19:44:22+00:00","updated_at":"2026-11-10T23:28:58+00:00","category":"runtime","confidence":0.6,"triage":{"at":"2026-11-10T19:44:22Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":".NET Aspire: sensitive data leaks into sent messages, enabling local privilege escalation","impact":"high","summary":".NET Aspire, Microsoft's framework for building distributed .NET apps, inserts sensitive information into data it sends. A local attacker with an existing account can use that exposed information to gain higher privileges.","audience":"developers","category":"runtime","nicknames":[],"who_cares":["dotnet","aspire","windows"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"local user gains higher privileges on the machine","analyst_note":"Find the affected and fixed .NET Aspire versions and the exact data exposed, via the NVD entry https://nvd.nist.gov/vuln/detail/CVE-2026-120006 and the Microsoft advisory it links to.","how_to_check":"- Check whether your project references Aspire packages, for example `Aspire.Hosting` in your `.csproj` or `Directory.Packages.props`\n- Check the installed Aspire version with `dotnet list package`\n- unknown for the exact affected version range, because the sources do not say","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-aspire-usage"],"who_is_affected":"The sources describe a local attack by an authorized user, and do not name the affected Aspire versions or the specific data path. Teams that run .NET Aspire on developer machines or shared hosts should check their installed version. unknown for which configurations are exposed.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.00074,"input_tokens":4495,"output_tokens":580,"severity_before":"high"},"analyst_status":"done","analyst_note":"Find the affected and fixed .NET Aspire versions and the exact data exposed, via the NVD entry https://nvd.nist.gov/vuln/detail/CVE-2026-120006 and the Microsoft advisory it links to.","search":"'-12':588C '-120006':6A,14A,22A '-201':29B,156C '-2026':5A,13A,21A,587C '/av':145C '/corebounty.':467C '/dotnet/announcements/issues/503':133C '/microsoft/aspire).':482C '/msrc/faqs-report-an-issue).':439C '/packages/aspire.hosting)':189C '/packages/aspire.hosting.apphost)':183C '/report/vulnerability/new).':424C '13.6.4':279C '13.6.5':184C,185C,190C,191C,321C,339C,355C '3.1':137C,144C '7.5':141C '7jrh':19A 'account':56B 'advis':554C 'advisori':3A,73C,83C,238C,489C 'affect':88C,164C,171C,176C,193C,215C,247C,281C,299C 'aka.ms':466C 'aka.ms/corebounty.':465C 'allow':104C,565C 'also':350C 'announc':122C,123C 'app':42B 'apphost':200C,228C,257C,313C,364C,383C 'appli':583C 'applic':89C 'architectur':168C 'arm64':170C 'ask':471C 'aspir':7A,27B,34B,81C,95C,174C,256C,282C,300C,374C,478C 'aspire.apphost.sdk':225C,332C 'aspire.hosting':23A,26A,186C,220C,352C 'aspire.hosting.apphost':24A,25A,180C,224C,316C 'attack':52B,107C,205C,272C 'attacker-control':106C,204C,271C 'authent':97C,113C,199C,258C 'bounti':451C,457C 'build':39B 'busi':540C 'c/c':150C 'center':415C 'central':346C 'cli':375C 'code':117C,217C 'compon':91C,301C 'condit':462C 'consequenti':537C,573C 'contain':109C,207C,274C 'control':108C,206C,273C 'cooki':98C 'corpor':523C,548C 'cve':4A,12A,20A,586C 'cvss':134C,143C 'cwe':28B,155C 'damag':531C,544C,560C,576C 'dashboard':96C,198C,261C,378C 'dashboard-authent':197C 'data':47B,163C 'default':236C 'depend':222C,359C,387C 'detail':135C,452C 'develop':121C,253C 'direct':534C 'disclaim':483C,500C 'disclosur':92C 'distribut':40B 'dotnet':30B 'either':503C 'elev':8A 'establish':296C 'even':545C 'event':520C 'exclus':567C 'execut':66C,116C 'exist':55B 'explicit':342C 'expos':60B 'express':504C 'extern':584C 'f7vh':17A 'faq':239C,436C 'fit':513C 'fix':308C 'follow':263C 'forego':579C 'found':129C,396C,429C 'framework':37B 'gain':63B 'gateway':213C 'ghsa':16A 'ghsa-f7vh-h5g3-7jrh':15A 'github.com':132C,481C 'github.com/dotnet/announcements/issues/503':131C 'github.com/microsoft/aspire).':480C 'guidanc':85C 'h':153C 'h/a':152C 'h/i':151C 'h/pr':147C 'h5g3':18A 'high':139C 'higher':64B 'host':120C,216C,386C 'https':211C 'impli':506C 'implicit':230C,330C 'incident':536C,575C 'includ':459C,507C,533C 'independ':284C 'indirect':535C 'inform':45B,61B,76C,160C,389C,426C,485C 'insert':43B,157C 'instal':287C 'involv':195C,251C 'issu':126C,310C,392C,400C,435C,475C 'kind':498C 'know':243C 'l/ac':146C 'l/ui':148C 'later':323C,341C,357C 'liabil':571C 'liabl':528C 'limit':569C,580C 'link':101C,210C,266C,585C 'local':51B 'loss':538C 'maco':167C 'made':442C 'may':445C,581C 'merchant':511C 'microsoft':1A,35B,68C,412C,449C,455C,499C,522C,547C 'msrc':416C,419C,432C,444C 'msrc.microsoft.com':423C 'msrc.microsoft.com/report/vulnerability/new).':422C 'must':349C 'net':33B,41B,286C,289C,370C,372C,406C,450C,456C 'obtain':327C 'overrid':234C 'packag':172C,175C,229C,317C,329C,343C 'particular':516C 'patch':178C 'pin':348C 'platform':165C,166C 'pleas':407C 'portal':421C 'possibl':557C 'potenti':398C 'privileg':10A,65B 'profit':541C 'program':458C 'project':233C,314C,326C,384C 'provid':75C,84C,486C,491C 'purpos':517C 'qualifi':446C 'question':472C 'r/s':149C 'rebuild':360C 'refer':237C,318C,336C,344C 'releas':70C,276C 'replac':381C 'replay':111C 'report':249C,390C,408C,433C,441C 'repositori':479C 'research':420C 'resolv':351C 'resourc':265C 'respons':414C 'restart':362C 'restor':358C 'rout':268C 'runtim':31B,290C,371C 'scenario':194C,250C 'score':140C 'sdk':292C,335C,373C 'secur':2A,72C,391C,399C,413C,440C 'send':49B 'sensit':44B,159C 'sent':162C 'servic':102C 'session':114C 'sever':138C 'shall':521C 'ship':283C 'special':543C 'standalon':173C,377C 'start':254C 'state':562C 'summari':67C 'suppli':226C 'supplier':526C,551C 'support':403C,468C 'term':460C 'unless':231C 'updat':87C,293C,304C,311C,333C,366C,367C 'use':58B 'vector':142C 'version':136C,177C,179C,277C,320C,338C,347C,354C,404C 'via':417C 'vulner':11A,79C 'warranti':495C,502C,509C 'weak':154C 'whatsoev':532C 'window':32B 'without':494C 'workflow':201C 'www.microsoft.com':438C 'www.microsoft.com/msrc/faqs-report-an-issue).':437C 'www.nuget.org':182C,188C 'www.nuget.org/packages/aspire.hosting)':187C 'www.nuget.org/packages/aspire.hosting.apphost)':181C 'x64':169C 'yarp':212C","nicknames":[],"mitigations":[],"who_affected":"Projects that reference Aspire.Hosting or Aspire.Hosting.AppHost at versions below 13.6.5 (the CNA lists 13.6.4). It is a local attack (CVSS 7.5, high complexity, needs user interaction): a user with an existing account on the same machine can use sensitive information in sent data to gain higher privileges. The sources do not say what data is exposed. Developer machines and shared build hosts running an Aspire AppHost matter most. Skip it if you do not use Aspire.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"developers","plain_action":null,"pkeys":["aspirehosting","aspirehostingapphost"],"ptokens":["apphost","aspire","hosting"],"labels":["aspire","cwe201","dotnet","high","nuget","runtime","windows"],"campaign_type":null,"search_a":"'-120006':6A,14A,22A '-2026':5A,13A,21A '7jrh':19A 'advisori':3A 'aspir':7A 'aspire.hosting':23A,26A 'aspire.hosting.apphost':24A,25A 'cve':4A,12A,20A 'elev':8A 'f7vh':17A 'ghsa':16A 'ghsa-f7vh-h5g3-7jrh':15A 'h5g3':18A 'microsoft':1A 'privileg':10A 'secur':2A 'vulner':11A","search_b":"'-201':29B 'account':56B 'app':42B 'aspir':27B,34B 'attack':52B 'build':39B 'cwe':28B 'data':47B 'distribut':40B 'dotnet':30B 'exist':55B 'expos':60B 'framework':37B 'gain':63B 'higher':64B 'inform':45B,61B 'insert':43B 'local':51B 'microsoft':35B 'net':33B,41B 'privileg':65B 'runtim':31B 'send':49B 'sensit':44B 'use':58B 'window':32B","search_c":"'-12':588C '-201':156C '-2026':587C '/av':145C '/corebounty.':467C '/dotnet/announcements/issues/503':133C '/microsoft/aspire).':482C '/msrc/faqs-report-an-issue).':439C '/packages/aspire.hosting)':189C '/packages/aspire.hosting.apphost)':183C '/report/vulnerability/new).':424C '13.6.4':279C '13.6.5':184C,185C,190C,191C,321C,339C,355C '3.1':137C,144C '7.5':141C 'advis':554C 'advisori':73C,83C,238C,489C 'affect':88C,164C,171C,176C,193C,215C,247C,281C,299C 'aka.ms':466C 'aka.ms/corebounty.':465C 'allow':104C,565C 'also':350C 'announc':122C,123C 'apphost':200C,228C,257C,313C,364C,383C 'appli':583C 'applic':89C 'architectur':168C 'arm64':170C 'ask':471C 'aspir':81C,95C,174C,256C,282C,300C,374C,478C 'aspire.apphost.sdk':225C,332C 'aspire.hosting':186C,220C,352C 'aspire.hosting.apphost':180C,224C,316C 'attack':107C,205C,272C 'attacker-control':106C,204C,271C 'authent':97C,113C,199C,258C 'bounti':451C,457C 'busi':540C 'c/c':150C 'center':415C 'central':346C 'cli':375C 'code':117C,217C 'compon':91C,301C 'condit':462C 'consequenti':537C,573C 'contain':109C,207C,274C 'control':108C,206C,273C 'cooki':98C 'corpor':523C,548C 'cve':586C 'cvss':134C,143C 'cwe':155C 'damag':531C,544C,560C,576C 'dashboard':96C,198C,261C,378C 'dashboard-authent':197C 'data':163C 'default':236C 'depend':222C,359C,387C 'detail':135C,452C 'develop':121C,253C 'direct':534C 'disclaim':483C,500C 'disclosur':92C 'either':503C 'establish':296C 'even':545C 'event':520C 'exclus':567C 'execut':66C,116C 'explicit':342C 'express':504C 'extern':584C 'faq':239C,436C 'fit':513C 'fix':308C 'follow':263C 'forego':579C 'found':129C,396C,429C 'gateway':213C 'github.com':132C,481C 'github.com/dotnet/announcements/issues/503':131C 'github.com/microsoft/aspire).':480C 'guidanc':85C 'h':153C 'h/a':152C 'h/i':151C 'h/pr':147C 'high':139C 'host':120C,216C,386C 'https':211C 'impli':506C 'implicit':230C,330C 'incident':536C,575C 'includ':459C,507C,533C 'independ':284C 'indirect':535C 'inform':76C,160C,389C,426C,485C 'insert':157C 'instal':287C 'involv':195C,251C 'issu':126C,310C,392C,400C,435C,475C 'kind':498C 'know':243C 'l/ac':146C 'l/ui':148C 'later':323C,341C,357C 'liabil':571C 'liabl':528C 'limit':569C,580C 'link':101C,210C,266C,585C 'loss':538C 'maco':167C 'made':442C 'may':445C,581C 'merchant':511C 'microsoft':68C,412C,449C,455C,499C,522C,547C 'msrc':416C,419C,432C,444C 'msrc.microsoft.com':423C 'msrc.microsoft.com/report/vulnerability/new).':422C 'must':349C 'net':286C,289C,370C,372C,406C,450C,456C 'obtain':327C 'overrid':234C 'packag':172C,175C,229C,317C,329C,343C 'particular':516C 'patch':178C 'pin':348C 'platform':165C,166C 'pleas':407C 'portal':421C 'possibl':557C 'potenti':398C 'profit':541C 'program':458C 'project':233C,314C,326C,384C 'provid':75C,84C,486C,491C 'purpos':517C 'qualifi':446C 'question':472C 'r/s':149C 'rebuild':360C 'refer':237C,318C,336C,344C 'releas':70C,276C 'replac':381C 'replay':111C 'report':249C,390C,408C,433C,441C 'repositori':479C 'research':420C 'resolv':351C 'resourc':265C 'respons':414C 'restart':362C 'restor':358C 'rout':268C 'runtim':290C,371C 'scenario':194C,250C 'score':140C 'sdk':292C,335C,373C 'secur':72C,391C,399C,413C,440C 'sensit':159C 'sent':162C 'servic':102C 'session':114C 'sever':138C 'shall':521C 'ship':283C 'special':543C 'standalon':173C,377C 'start':254C 'state':562C 'summari':67C 'suppli':226C 'supplier':526C,551C 'support':403C,468C 'term':460C 'unless':231C 'updat':87C,293C,304C,311C,333C,366C,367C 'vector':142C 'version':136C,177C,179C,277C,320C,338C,347C,354C,404C 'via':417C 'vulner':79C 'warranti':495C,502C,509C 'weak':154C 'whatsoev':532C 'without':494C 'workflow':201C 'www.microsoft.com':438C 'www.microsoft.com/msrc/faqs-report-an-issue).':437C 'www.nuget.org':182C,188C 'www.nuget.org/packages/aspire.hosting)':187C 'www.nuget.org/packages/aspire.hosting.apphost)':181C 'x64':169C 'yarp':212C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:20:26+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H","cvss_by":"GitHub","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-120006","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-120006","severity":null,"published_at":"2026-11-10T19:20:26+00:00","modified_at":"2026-11-10T19:20:26+00:00","first_seen_at":"2026-11-10T19:25:07+00:00","fetched_at":"2026-11-10T19:25:07+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-120006:2919","url":"https://github.com/microsoft/aspire/releases/tag/v13.6.5","severity":null,"published_at":"2026-11-10T22:07:07+00:00","modified_at":"2026-11-10T22:07:07+00:00","first_seen_at":"2026-11-10T22:07:07+00:00","fetched_at":"2026-11-10T22:07:07+00:00","note":"Microsoft advisory (MSRC) not readable; affected range from CNA data via OpenCVE: Aspire.Hosting and Aspire.Hosting.AppHost <13.6.5 (13.6.4 listed). 13.6.5 released 2026-11-10 but its notes do not name this CVE, so the fix link is a likely fix, not verified. The data exposed is not stated in any source I could read. Nothing verified.","cites":["https://github.com/microsoft/aspire/releases/tag/v13.6.5","https://app.opencve.io/cve/CVE-2026-120006"]},{"source":"ghsa","external_id":"GHSA-f7vh-h5g3-7jrh","url":"https://github.com/advisories/GHSA-f7vh-h5g3-7jrh","severity":"high","published_at":"2026-11-10T23:24:48+00:00","modified_at":"2026-11-10T23:24:49+00:00","first_seen_at":"2026-11-10T23:28:58+00:00","fetched_at":"2026-11-10T23:34:09+00:00","note":null}],"documents":[{"id":119387,"url":"https://github.com/microsoft/aspire/releases/tag/v13.6.5","title":"Aspire 13.6.5 release notes","kind":"release","source":"analyst","publisher":"vendor","text":null,"published_at":null,"relation":"fix","confidence":null,"note":null},{"id":119388,"url":"https://app.opencve.io/cve/CVE-2026-120006","title":"OpenCVE: CVE-2026-120006 (CNA affected ranges)","kind":"other","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"describes","confidence":null,"note":null},{"id":120321,"url":"https://api.github.com/repos/microsoft/aspire/security-advisories/GHSA-f7vh-h5g3-7jrh","title":"Maintainer's advisory: api.github.com","kind":"vendor","source":"ghsa","publisher":"vendor","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":"Maintainer's advisory: api.github.com"},{"id":120322,"url":"https://github.com/microsoft/aspire/security/advisories/GHSA-f7vh-h5g3-7jrh","title":"Maintainer's advisory: github.com","kind":"vendor","source":"ghsa","publisher":"vendor","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":"Maintainer's advisory: github.com"},{"id":120323,"url":"https://github.com/microsoft/aspire/commit/f017f668fd6e0938e23058dc0450a1403f409809","title":"Patch: github.com","kind":"other","source":"ghsa","publisher":"vendor","text":null,"published_at":null,"relation":"fix","confidence":null,"note":"Patch: github.com"}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}