Critical Spoofing Vulnerability in .NET 8.0 Packages
Summary
ALSA-2025:7599: Important: .NET 8.0 security update. Affects aspnetcore-runtime-8.0 versions < 8.0.16-1.el10_0. Fixed in 8.0.16-1.el10_0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The .NET framework is a managed-software platform that provides a comprehensive environment for building and running applications. It includes a Common Language Runtime (CLR) and a rich set of APIs. The recent versions of .NET, specifically .NET SDK 8.0.116 and .NET Runtime 8.0.16, have introduced significant updates that address security vulnerabilities, making it essential for developers to stay updated to maintain application integrity.
Vulnerability Detail
The vulnerability identified as CVE-2025-26646 is a spoofing vulnerability affecting .NET and Visual Studio. This issue can allow an attacker to impersonate a legitimate user, potentially leading to unauthorized access or manipulation of sensitive data. The vulnerability arises from improper validation of user input, which can be exploited to execute malicious code or commands.
How To Fix
Minimum fixed version
8.0.16-1.el10_0
This is the first release that contains the fix.
sudo dnf update aspnetcore-runtime-8.0Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If immediate patching is not feasible, consider implementing input validation and sanitization in your application to reduce the risk of exploitation. Additionally, restrict access to sensitive functionalities until the update can be applied.
Conclusion
The .NET 8.0 security update addresses a critical spoofing vulnerability that could have severe implications for application security. It is essential for developers to update their packages promptly and consider implementing additional security measures in the interim.
See every vulnerability recorded for aspnetcore-runtime-8.0 →
FAQ
CVE-2025-26646 is a spoofing vulnerability in .NET that allows attackers to impersonate legitimate users.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
Exploitation of this vulnerability can lead to unauthorized access, data manipulation, and potential data breaches.
Yes, the patched versions are .NET SDK 8.0.116 and .NET Runtime 8.0.16. It is recommended to update to these versions.
Implement input validation and restrict access to sensitive functionalities as a temporary measure until you can apply the update.
Related vulnerabilities
Recent vulnerabilities recorded for aspnetcore-runtime-8.0.
