{"id":"GHSA-r33q-3g5w-gqx6","kind":"vulnerability","aliases":["GHSA-r33q-3g5w-gqx6"],"related":[],"title":"Duplicate Advisory: Microsoft Security Advisory CVE-2026-105544 - .NET Elevation of Privilege Vulnerability","description":"## Duplicate Advisory\n\nThis advisory has been withdrawn because it is a duplicate of GHSA-6856-87hx-p5x7. This link is maintained to preserve external references.\n\n## Original Description\nImproper access control in .NET allows an authorized attacker to elevate privileges locally.","summary":"This advisory was withdrawn as a duplicate of GHSA-6856-87hx-p5x7. The original text says improper access control in .NET lets an authorized local attacker elevate privileges.","severity":"high","cvss":7.5,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Microsoft.TestPlatform.CLI","fixed":[],"affected":">= 17.2.0-preview-20220301-01, < 17.3.0","ecosystem":"nuget"}],"ecosystems":["nuget"],"tags":["ci","dotnet","nuget","package"],"not_affected_if":["version-outside-range","withdrawn-duplicate"],"how_to_check":"- Check the installed `Microsoft.TestPlatform.CLI` version in your project or lock file against the range `>= 17.2.0-preview-20220301-01, < 17.3.0`.\n- Follow GHSA-6856-87hx-p5x7 for the live entry and its fix status.","fix":null,"status":"withdrawn","published_at":"2026-11-10T21:32:22+00:00","first_seen_at":"2026-11-11T00:14:38+00:00","triaged_at":"2026-11-11T00:15:14+00:00","updated_at":"2026-11-11T00:15:14+00:00","category":"package","confidence":0.6,"triage":{"at":"2026-11-11T00:15:14Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Microsoft.TestPlatform.CLI: withdrawn duplicate advisory for a local privilege escalation","impact":"high","summary":"This advisory was withdrawn as a duplicate of GHSA-6856-87hx-p5x7. The original text says improper access control in .NET lets an authorized local attacker elevate privileges.","audience":"developers","category":"package","nicknames":[],"who_cares":["dotnet","nuget","ci"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"local user gains elevated privileges on the machine","analyst_note":"Check GHSA-6856-87hx-p5x7 for the fixed version and affected range of Microsoft.TestPlatform.CLI, since this withdrawn duplicate lists none.","how_to_check":"- Check the installed `Microsoft.TestPlatform.CLI` version in your project or lock file against the range `>= 17.2.0-preview-20220301-01, < 17.3.0`.\n- Follow GHSA-6856-87hx-p5x7 for the live entry and its fix status.","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["version-outside-range","withdrawn-duplicate"],"who_is_affected":"The withdrawn advisory lists Microsoft.TestPlatform.CLI versions from 17.2.0-preview-20220301-01 up to but not including 17.3.0 as affected. It names local privilege escalation by an already-authorized user, so exposure is limited to machines where such users run builds or tests. Teams not using these versions can skip it. The duplicate advisory gives no fixed version; use GHSA-6856-87hx-p5x7.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000781,"input_tokens":4636,"output_tokens":634,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-105544':8A '-2026':7A '-6856':38B,73C '-87':39B,74C '3g5w':17A,22A 'access':48B,89C 'advisori':2A,5A,30B,60C,62C 'allow':93C 'attack':56B,96C 'author':54B,95C 'ci':25B 'control':49B,90C 'cve':6A 'descript':87C 'dotnet':26B 'duplic':1A,35B,59C,70C 'elev':10A,57B,98C 'extern':84C 'ghsa':15A,20A,37B,72C 'ghsa-r33q-3g5w-gqx6':14A,19A 'gqx6':18A,23A 'hx':41B,76C 'hx-p5x7':40B,75C 'improp':47B,88C 'let':52B 'link':79C 'local':55B,100C 'maintain':81C 'microsoft':3A 'microsoft.testplatform.cli':24A 'net':9A,51B,92C 'nuget':27B 'origin':44B,86C 'p5x7':42B,77C 'packag':28B 'preserv':83C 'privileg':12A,58B,99C 'r33q':16A,21A 'refer':85C 'say':46B 'secur':4A 'text':45B 'vulner':13A 'withdrawn':32B,65C","nicknames":[],"mitigations":[],"who_affected":"The withdrawn advisory lists Microsoft.TestPlatform.CLI versions from 17.2.0-preview-20220301-01 up to but not including 17.3.0 as affected. It names local privilege escalation by an already-authorized user, so exposure is limited to machines where such users run builds or tests. Teams not using these versions can skip it. The duplicate advisory gives no fixed version; use GHSA-6856-87hx-p5x7.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"developers","plain_action":null,"pkeys":["microsofttestplatformcli"],"ptokens":["cli","microsoft","testplatform"],"labels":["ci","dotnet","high","nuget","package"],"campaign_type":null,"search_a":"'-105544':8A '-2026':7A '3g5w':17A,22A 'advisori':2A,5A 'cve':6A 'duplic':1A 'elev':10A 'ghsa':15A,20A 'ghsa-r33q-3g5w-gqx6':14A,19A 'gqx6':18A,23A 'microsoft':3A 'microsoft.testplatform.cli':24A 'net':9A 'privileg':12A 'r33q':16A,21A 'secur':4A 'vulner':13A","search_b":"'-6856':38B '-87':39B 'access':48B 'advisori':30B 'attack':56B 'author':54B 'ci':25B 'control':49B 'dotnet':26B 'duplic':35B 'elev':57B 'ghsa':37B 'hx':41B 'hx-p5x7':40B 'improp':47B 'let':52B 'local':55B 'net':51B 'nuget':27B 'origin':44B 'p5x7':42B 'packag':28B 'privileg':58B 'say':46B 'text':45B 'withdrawn':32B","search_c":"'-6856':73C '-87':74C 'access':89C 'advisori':60C,62C 'allow':93C 'attack':96C 'author':95C 'control':90C 'descript':87C 'duplic':59C,70C 'elev':98C 'extern':84C 'ghsa':72C 'hx':76C 'hx-p5x7':75C 'improp':88C 'link':79C 'local':100C 'maintain':81C 'net':92C 'origin':86C 'p5x7':77C 'preserv':83C 'privileg':99C 'refer':85C 'withdrawn':65C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T21:32:22+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H","cvss_by":"GitHub","poc_count":0,"sources":[{"source":"ghsa","external_id":"GHSA-r33q-3g5w-gqx6","url":"https://github.com/advisories/GHSA-r33q-3g5w-gqx6","severity":"high","published_at":"2026-11-10T21:32:22+00:00","modified_at":"2026-11-11T00:11:55+00:00","first_seen_at":"2026-11-11T00:14:38+00:00","fetched_at":"2026-11-11T00:24:45+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}