CVE-2026-62900

Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network.

Red Hat rates this vulnerability as Moderate impact because information exposure is limited to environments where credentials are explicitly configured within Git remote URLs and compiled artifacts are shared externally. The flaw does not grant remote code execution or direct compromise of deployed .NET services, but rather risks credential leakage through generated binary and debug metadata. Consequently, exposure is confined to build-time workflows with non-standard Git configurations and depends on distributing the produced assemblies to untrusted recipients.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.