Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.
microsoft·CWE-276·Published 2026-10-29