CVE-2026-96231

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

This vulnerability is rated as Important rather than Moderate because an authenticated local user can achieve a complete system compromise and escalate to root privileges without requiring user interaction. In standard Red Hat Enterprise Linux deployments hosting multi-user environments or shared application workloads, .NET applications managing synchronization objects in shared temporary locations are exposed to symlink manipulation. Exploitation strictly requires local host access, limiting the attack surface from external network boundaries.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.