CVE-2025-26646

Name of the Vulnerable Software and Affected Versions: .NET versions prior to the fixed version Visual Studio (affected versions not specified) Build Tools for Visual Studio (affected versions not specified)

Description: The issue allows an authorized attacker to perform spoofing over a network due to external control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio. This can enable attackers to masquerade as legitimate services.

Recommendations: For .NET, update to a version that includes the fix for this issue. For Visual Studio, apply the necessary security updates to resolve the vulnerability. For Build Tools for Visual Studio, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to sensitive files and paths to minimize the risk of exploitation.