CVE-2025-30399

Published: Jun 11, 2025
Updated: Jun 30, 2025
CVE: <a href="https://nvd.nist.gov/vuln/detail/CVE-2025-30399" target="_blank" rel="noopener"> CVE-2025-30399
GHSA: <a href="https://github.com/advisories/GHSA-266m-wp2v-x7mq" target="_blank" rel="noopener"> GHSA-266m-wp2v-x7mq
Severity: High
Exploit:

Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network.

CVSS v3:

CWEs:

Software	From	Fixed in
Microsoft.NETCore.App.Runtime.linux-arm	9.0.0	9.0.6
Microsoft.NETCore.App.Runtime.linux-arm64	9.0.0	9.0.6
Microsoft.NETCore.App.Runtime.linux-musl-arm	9.0.0	9.0.6
Microsoft.NETCore.App.Runtime.linux-musl-arm64	9.0.0	9.0.6
Microsoft.NETCore.App.Runtime.linux-musl-x64	9.0.0	9.0.6
Microsoft.NETCore.App.Runtime.linux-x64	9.0.0	9.0.6
Microsoft.NETCore.App.Runtime.osx-arm64	9.0.0	9.0.6
Microsoft.NETCore.App.Runtime.osx-x64	9.0.0	9.0.6
Microsoft.NETCore.App.Runtime.win-arm	9.0.0	9.0.6
Microsoft.NETCore.App.Runtime.win-arm64	9.0.0	9.0.6
Microsoft.NETCore.App.Runtime.win-x64	9.0.0	9.0.6
Microsoft.NETCore.App.Runtime.win-x86	9.0.0	9.0.6
Microsoft.NETCore.App.Runtime.linux-arm	8.0.0	8.0.17
Microsoft.NETCore.App.Runtime.linux-arm64	8.0.0	8.0.17
Microsoft.NETCore.App.Runtime.linux-musl-arm	8.0.0	8.0.17
Microsoft.NETCore.App.Runtime.linux-musl-arm64	8.0.0	8.0.17
Microsoft.NETCore.App.Runtime.linux-musl-x64	8.0.0	8.0.17
Microsoft.NETCore.App.Runtime.linux-x64	8.0.0	8.0.17
Microsoft.NETCore.App.Runtime.osx-arm64	8.0.0	8.0.17
Microsoft.NETCore.App.Runtime.osx-x64	8.0.0	8.0.17
Microsoft.NETCore.App.Runtime.win-arm	8.0.0	8.0.17
Microsoft.NETCore.App.Runtime.win-arm64	8.0.0	8.0.17
Microsoft.NETCore.App.Runtime.win-x64	8.0.0	8.0.17
Microsoft.NETCore.App.Runtime.win-x86	8.0.0	8.0.17