CVE-2026-118740: Aspire Security Feature Bypass Vulnerability
Published Nov 10, 2026
·Updated
Aspire Security Feature Bypass Vulnerability
Other sources
Missing authorization in Aspire allows an unauthorized attacker to bypass a security feature over a network.
— Microsoft
Affected Software
2 affected componentsFixes available
Microsoft Aspire.Dashboard.Sdk.linux-x64<13.6.5
13.6.5
Microsoft Aspire Dashboard<13.6.5
13.6.5
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 13.6.5
Event History
Nov 10, 2026
CVE Published
via Microsoft·04:00 PM
Data Sourced
via Microsoft·04:00 PM
DescriptionSeverityWeaknessAffected Software
CVE Published
via MITRE·06:24 PM
Data Sourced
via MITRE·06:24 PM
DescriptionSeverity
Data Sourced
via NVD·07:19 PM
DescriptionSeverityWeakness