CVE-2026-54777

Name of the Vulnerable Software and Affected Versions CoreWCF versions prior to 1.8.1 CoreWCF versions prior to 1.9.1

Description The NetNamedPipe transport in CoreWCF allows local interception of traffic. This occurs because the transport accepts attachments to pre-existing named pipe instances. An attacker can exploit this by racing the NamedPipeListener startup, creating the named pipe after the service publishes a unique GUID to a shared memory object but before the service creates the named pipe itself.

Recommendations Update CoreWCF to version 1.8.1. Update CoreWCF to version 1.9.1.