CVE-2026-120792 | BDVDB-2026-404444 Detail
MicrosoftAspire.Cli
Description#
Insertion of sensitive information into log file in .NET Aspire allows an authorized attacker to disclose information locally.
Impact#
Per CVSS v3.1: confidentiality impact high, integrity impact low, availability impact low. Attack vector: local.
Weaknesses#
- CWE-532 Insertion of Sensitive Information into Log File
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.