CVE-2025-7326 EOL ASP.NET Core Elevation of Privilege Vulnerability
Weak authentication in End-of-Life ASP.NET Core allows unauthorized attackers to elevate privileges over the network.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-7326?
CVE-2025-7326 is a high-severity authentication bypass vulnerability in Microsoft ASP.NET Core 6.0, published on 8 Jul 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Weak authentication in EOL ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.
NOTE: This CVE affects only End Of Life (EOL) software components. The vendor, Microsoft, has indicated there will be no future updates nor support provided upon inquiry.
Weakness: CWE-1390
Which versions are affected by CVE-2025-7326?
3 open source packages ship an affected version, including aspnet-core, dotnet and dotnet-sdk.
| Package | Affected | Fixed in |
|---|---|---|
aspnet-core Bitnami | From 6.0.0 | 8.0.1 |
dotnet Bitnami | From 6.0.0 | 8.0.1 |
dotnet-sdk Bitnami | From 6.0.0 | 6.0.418 |
How do I fix CVE-2025-7326?
Upgrade aspnet-core to 8.0.1 or later.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2025-7326 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-7326 exists.
Sources
Also known as BIT-aspnet-core-2025-7326, BIT-dotnet-2025-7326, BIT-dotnet-sdk-2025-7326, GHSA-jqfh-6jjg-67xg.