CVE-2026-96225

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

Red Hat Product Security rates this vulnerability as Important because an authenticated local user can achieve elevated privileges or corrupt critical files on multi-user systems. In typical Red Hat Enterprise Linux environments hosting .NET applications or services executed by privileged accounts, flaws in shared inter-process communication path handling permit attackers to traverse symbolic links or manipulate permissions in common temporary directories. Exploitation does not require external network exposure or interactive user assistance, though it is constrained to environments where unprivileged local users have shell access to hosts running vulnerable .NET workloads.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.