Critical Remote Code Execution Vulnerability in .NET 9.0 Packages
Summary
ALSA-2025:8815: Important: .NET 9.0 security update. Affects aspnetcore-runtime-9.0 versions < 9.0.6-1.el8_10. Fixed in 9.0.6-1.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
.NET is a managed-software framework that provides a comprehensive programming model for building applications. It includes a subset of the .NET framework APIs along with several new APIs and a Common Language Runtime (CLR) implementation. The framework is widely used for developing web applications, services, and desktop applications. However, recent updates have revealed a critical vulnerability that could allow remote code execution, impacting various components of the .NET ecosystem.
Vulnerability Detail
The vulnerability identified as CVE-2025-30399 allows attackers to execute arbitrary code on the server or client machines running affected versions of .NET. This issue arises from improper validation of input, which can be exploited by sending specially crafted requests. If successfully exploited, it could lead to unauthorized access, data breaches, and complete system compromise, making it a severe security risk for applications relying on .NET.
How To Fix
Minimum fixed version
9.0.6-1.el8_10
This is the first release that contains the fix.
sudo dnf update aspnetcore-runtime-9.0Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can restrict access to the affected applications or services until the updates are applied. Implementing network-level security measures, such as firewalls and intrusion detection systems, can also help mitigate the risk of exploitation.
Conclusion
The recent security update for .NET 9.0 addresses a critical remote code execution vulnerability that could have severe implications for applications using this framework. It is crucial for developers and system administrators to update their packages to the latest versions to mitigate risks and protect their systems.
See every vulnerability recorded for aspnetcore-runtime-9.0 →
FAQ
CVE-2025-30399 is a critical vulnerability in .NET 9.0 that allows remote code execution due to improper input validation.
You can use Vulert, which monitors open-source vulnerabilities in your software using a manifest file like package-lock.json. Visit Vulert Scanner to check your application without any signup.
Exploitation of this vulnerability could lead to unauthorized access, data breaches, and complete system compromise, posing significant risks to applications.
It is recommended to regularly check for updates and apply them promptly to ensure your applications are protected against known vulnerabilities.
If immediate updates are not possible, consider implementing network security measures and restricting access to the affected applications as a temporary workaround.
Related vulnerabilities
Recent vulnerabilities recorded for aspnetcore-runtime-9.0.
