CVE-2026-118740 Aspire Security Feature Bypass Vulnerability
CriticalCVSS 9.1
- Published
- Updated
- Exploit status
- No public exploit known
Description
Missing authorization in Aspire allows an unauthorized attacker to bypass a security feature over a network.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft aspire dashboard | < 13.6.5 | 13.6.5 |
| Microsoft aspire.dashboard.sdk.linux-x64 | < 13.6.5 | 13.6.5 |
| Microsoft aspire dashboard | >= 13.6.1, < 13.6.5 | 13.6.5 |
| Microsoft aspire.dashboard.sdk.linux-x64 | >= 13.6.1, < 13.6.5 | 13.6.5 |
References
- MSRC Security Update Guide patch vendor-advisory
- Release Notes patch
- Release Notes vendor-advisory
- Release Notes patch