CVE-2025-26646
.NET, Visual Studio, and Build Tools for Visual Studio Spoofing Vulnerability
Summary
.NET, Visual Studio, and Build Tools for Visual Studio Spoofing Vulnerability
Original description
The description as published by the source.
External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized attacker to perform spoofing over a network.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Bitnami
dotnet-sdk
[{"type":"SEMVER","events":[{"introduced":"8.0.0"},{"fixed":"8.0.101"},{"introduced":"9.0.0"},{"fixed":"9.0.100"}]}]
Bitnami
dotnet
[{"type":"SEMVER","events":[{"introduced":"8.0.0"},{"fixed":"8.0.16"},{"introduced":"9.0.0"},{"fixed":"9.0.5"}]}]
References
- advisory msrc.microsoft.com
- web nvd.nist.gov