This page tracks the Alpine Linux fix status. The vulnerability itself is described on the main CVE page.
View CVE-2026-114148 →
Unrated
Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.
ALPINE-CVE-2026-114148
First seen on SecPulse
Affected packages
| Package | Affected → Fixed | |
|---|---|---|
| Alpine:v3.24dotnet10-runtime |
< 10.0.14-r0→ 10.0.14-r0 |
10.0.14-r0 |
| Alpine:v3.22dotnet8-runtime |
< 8.0.33-r0→ 8.0.33-r0 |
8.0.33-r0 |
| Alpine:v3.23dotnet8-runtime |
< 8.0.33-r0→ 8.0.33-r0 |
8.0.33-r0 |
| Alpine:v3.24dotnet8-runtime |
< 8.0.33-r0→ 8.0.33-r0 |
8.0.33-r0 |
| Alpine:v3.22dotnet9-runtime |
< 9.0.22-r0→ 9.0.22-r0 |
9.0.22-r0 |
| Alpine:v3.23dotnet9-runtime |
< 9.0.22-r0→ 9.0.22-r0 |
9.0.22-r0 |
| Alpine:v3.24dotnet9-runtime |
< 9.0.22-r0→ 9.0.22-r0 |
9.0.22-r0 |
Original description The description as published by the source.
Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.
Source: OSV.dev (Open Source Vulnerabilities) OSV
References
- advisory security.alpinelinux.org