ALPINE-CVE-2026-105544: High severity alpine/dotnet9-runtime vulnerability
Improper access control in .NET allows an authorized attacker to elevate privileges locally.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/dotnet9-runtimeto a version that resolves this vulnerability.Fixed in 9.0.23-r0
Event History
Frequently Asked Questions
Who is exposed to this issue?
Systems running the alpine/dotnet9-runtime package are affected by this vulnerability. Exploitation is local rather than network-based.
What access does an attacker need to exploit it?
An attacker must already be authorized on the affected system and have low-level privileges. Exploitation also requires user interaction and high attack complexity.
What is the potential impact of successful exploitation?
A successful attacker can elevate privileges and may gain high-impact access affecting confidentiality, integrity, and availability. The vulnerability can also affect resources beyond the original security authority.