CVE-2026-120006

Microsoft Security Advisory CVE-2026-120006 - Aspire Elevation of Privilege Vulnerability

Aspire.Hosting.AppHost, Aspire.Hosting

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Aspire. This advisory provides guidance on updating affected applications and components. Disclosure of an Aspire Dashboard authentication cookie to a linked service can allow an attacker-controlled container to replay the authenticated session and execute code as the host developer. ## Announcement Announcement for this issue can be found at…

11. Nov 2026

Ausgewertete Quellen

• GitHub
  GHSA-f7vh-h5g3-7jrh