MICROSOFT.TESTPLATFORM.CLI · GHSA-r33q-3g5w-gqx6 · Package
NO FIX YET
This advisory was withdrawn as a duplicate of GHSA-6856-87hx-p5x7. The original text says improper access control in .NET lets an authorized local attacker elevate privileges.
first public Nov 10, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
The withdrawn advisory lists Microsoft.TestPlatform.CLI versions from 17.2.0-preview-20220301-01 up to but not including 17.3.0 as affected. It names local privilege escalation by an already-authorized user, so exposure is limited to machines where such users run builds or tests. Teams not using these versions can skip it. The duplicate advisory gives no fixed version; use GHSA-6856-87hx-p5x7.
Not affected if version-outside-range, withdrawn-duplicate
Who cares ci, dotnet, nuget
Microsoft.TestPlatform.CLI version in your project or lock file against the range >= 17.2.0-preview-20220301-01, < 17.3.0.No fix yet, per the sources.
This advisory has been withdrawn because it is a duplicate of GHSA-6856-87hx-p5x7. This link is maintained to preserve external references.
Improper access control in .NET allows an authorized attacker to elevate privileges locally.
This page as .md · .json · CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
GitHub Advisory Database, CC-BY 4.0. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.