CVE-2026-62847
2 advisories.
NuGet/Metalama.Framework CVE-2026-62847: high 8.2
Metalama allows local code execution through DLL planting in shared temporary directories
Action: Upgrade Metalama.Framework to 2025.1.18 (2025.1.x), 2026.0.25 (2026.0.x) or 2026.1.19 (2026.1.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 2026.1.0-preview | 2026.1.19 | - |
| 0 | 2025.1.18 | - |
| 2026.0.0-preview | 2026.0.25 | - |
Fixed versions
| 2026.1.19 | 2025.1.18 | 2026.0.25 |
Sources
- osv: GHSA-m6wq-39m7-9xpp
- https://github.com/metalama/Metalama/security/advisories/GHSA-m6wq-39m7-9xpp
- https://github.com/metalama/Metalama/pull/1719
- https://github.com/metalama/Metalama/commit/09911349a916e82194b1cfaa6d0a38acad928fc9
- https://github.com/metalama/Metalama/commit/92c4feecfce86d18fcb007ab6d3a1b4383326a2e
- https://github.com/metalama/Metalama/commit/ab9407263203c66d7c5680a34c28dba31f9951c9
- https://github.com/metalama/Metalama
CVE-2026-62847 · published · modified · JSON
NuGet/Metalama.Tool CVE-2026-62847: high 8.2
Metalama allows local code execution through DLL planting in shared temporary directories
Action: Upgrade Metalama.Tool to 2025.1.18 (2025.1.x), 2026.0.25 (2026.0.x) or 2026.1.19 (2026.1.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 2026.1.0-preview | 2026.1.19 | - |
| 0 | 2025.1.18 | - |
| 2026.0.0-preview | 2026.0.25 | - |
Fixed versions
| 2026.1.19 | 2025.1.18 | 2026.0.25 |
Sources
- osv: GHSA-m6wq-39m7-9xpp#NuGet/Metalama.Tool
- https://github.com/metalama/Metalama/security/advisories/GHSA-m6wq-39m7-9xpp
- https://github.com/metalama/Metalama/pull/1719
- https://github.com/metalama/Metalama/commit/09911349a916e82194b1cfaa6d0a38acad928fc9
- https://github.com/metalama/Metalama/commit/92c4feecfce86d18fcb007ab6d3a1b4383326a2e
- https://github.com/metalama/Metalama/commit/ab9407263203c66d7c5680a34c28dba31f9951c9
- https://github.com/metalama/Metalama
CVE-2026-62847 · published · modified · JSON