UBUNTU-CVE-2026-114156: Medium severity ubuntu/dotnet7 vulnerability
PathString.StartsWithSegments can mishandle percent-encoded backslashes and permit authorization checks to match an unintended path.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/dotnet11to a version that resolves this vulnerability.Fixed in 11.0.100-11.0.0-0ubuntu1~26.10.1
Event History
Frequently Asked Questions
What conditions are required for exploitation?
An attacker would need to reach an application that uses PathString.StartsWithSegments in an authorization decision and can supply a path containing percent-encoded backslashes. The issue is network-reachable and requires no privileges or user interaction, but exploitation has high attack complexity.
Which systems should be prioritized for review?
Review Ubuntu deployments using dotnet7 or dotnet11, particularly applications that enforce route- or path-based authorization with PathString.StartsWithSegments. The available data does not state whether default application configurations are affected.
What is the potential impact if exploitation succeeds?
Successful exploitation can allow authorization checks to match an unintended path. The reported impact includes limited confidentiality impact and high integrity impact, with no availability impact.