Advisories for Nuget/Aspire.Cli.linux-X64 package

2026

Microsoft Security Advisory CVE-2026-120778 - Aspire Elevation of Privilege Vulnerability

Microsoft is releasing this security advisory to provide information about a vulnerability in the Aspire CLI. This advisory provides guidance on updating affected applications and components. An insecure temporary directory used by Aspire CLI-generated builds can allow a local attacker to influence MSBuild response-file discovery and execute code with the privileges of the developer running the CLI.