{"affected":[{"platforms":["Linux","Mac OS"],"product":"Aspire.Cli","source":"CNA: microsoft","vendor":"Microsoft","versions":[{"lessThan":"13.6.5","status":"affected","version":"13.5.4","versionType":"custom"}]}],"cveId":"CVE-2026-120792","cwes":["CWE-532"],"description":"Insertion of sensitive information into log file in .NET Aspire allows an authorized attacker to disclose information locally.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":7.3,"severity":"high","source":"CNA: microsoft","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:L/E:U/RL:O/RC:C","version":"3.1"}],"modifiedAt":1794339733735,"publishedAt":1794334917285,"references":[{"source":"CNA: microsoft","tags":["vendor-advisory","patch"],"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-120792"}],"remediation":[{"kind":"fix","source":"CNA: microsoft","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-120792"}],"revision":"f413c80effd50bfe25e59ef1d79d2793318ec27dbd4f4c4388977fa6f188285c","sources":[{"modifiedAt":1794339733735,"name":"CNA: microsoft","retrievedAt":1794340174659,"url":"https://www.cve.org/CVERecord?id=CVE-2026-120792"}],"ssvc":null,"status":"published","title":"Aspire Information Disclosure Vulnerability","updatedAt":1794340174659}