MicrosoftAnalysisMicrosoft fixes .NET Linux tarball ownership privilege escalation flaw
What happened.Microsoft released security advisory CVE-2026-114148 addressing a high-severity privilege escalation vulnerability caused by unsafe file ownership metadata in Linux .NET application packages.
Why it matters.Enterprise cloud platforms distribute shared container runtimes across multi-tenant worker clusters to run mission-critical applications. When application installation archives embed permissive file permissions, unprivileged users can modify operational runtimes to compromise host security perimeters. Systems administrators must redeploy patched .NET container images across production environments immediately. Security engineers should audit automated CI pipelines to verify file extraction masks.
The technical specifications:
- Vulnerability mechanics: Tracked as CVE-2026-114148 with a 7.8 CVSS score, improper file permissions embedded inside official Linux container tarballs assign root ownership to arbitrary local users during package extraction.
- Exploitation path: Attackers with unprivileged local accounts on container worker nodes or shared development hosts modify extracted binary directories to achieve administrative root execution across host environments.
- Remediation releases: Microsoft published updated servicing releases for .NET 8, 9, 10, and 11 Release Candidate 3, while urging developers running source-build packages to rebuild container base images.
STORYLINE PROGRESSION & CONTEXT
This report represents a verified evolution of prior newsroom intelligence: